Mitel OpenScape Accounting Management Path Traversal Vulnerability

A path traversal vulnerability has been identified in Mitel OpenScape Accounting Management versions through V5 R1.1.0. This vulnerability allows an authenticated attacker with administrative privileges to upload arbitrary files and execute unauthorized commands, due to inadequate input sanitization and restrictions on file upload types.

Impact

Exploitation of this vulnerability could lead to unauthorized file uploads, allowing attackers to execute arbitrary commands and potentially gain control of the system.

Remediation

Users are advised to upgrade to OpenScape Accounting Management version V5 R1.1.4 or later. For further information, please contact Mitel Product Support.