Mitel MiContact Center Business Legacy Chat Information Disclosure Vulnerability

An information disclosure vulnerability exists in the legacy chat component of Mitel MiContact Center Business, affecting versions through 10.2.0.3. The vulnerability allows an unauthenticated attacker to access sensitive information by exploiting improper session data handling. This exploitation, which requires user interaction, could lead to unauthorized access to active chat rooms, allowing the attacker to read chat messages and send messages during an active session.

Impact

Successful exploitation could result in unauthorized access to active chat rooms, enabling the attacker to read chat data and send messages during an active chat session.

Remediation

Users are advised to upgrade to versions 10.2.0.3, 10.1.0.5, 10.0.0.4, or 9.5.0.3, and apply the provided hotfixes. For further information, consult the Mitel Knowledge Base article SO8353 'MiContact Center Business, Security Update - CVE-2025-27827'.