CVE-2020-11798 json
A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow a…
published 2020-06-10 6 y ago modified 2026-06-17 4 mo ago also EUVD-2020-4140
- cvss
- 5.3
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 48.8%
- EPSS 48.8% chance of exploitation in 30 days, percentile 98%
- public exploits
- 1
- Exploit-DB, plus a Nuclei check
Summary
A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit could allow an attacker to access sensitive information from the restricted directories.
Patch / fix
- mitel micollab_audio,_web_&_video_conferencing 8.1.2.4, 9.1.3
Timeline
- Published
- First public exploit (EDB-51308)
Exploit prediction
48.77% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-51308 Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal and LFI webapps, 2023-04-06
- Nuclei template Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal nuclei detection template
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
mitel.com
/support/security-advisories/mitel-product-security-advisory-20-0005
vendor-advisory
-
mitel.com
/-/media/mitel/file/pdf/support/security-advisories/security-bulletin-20-0005-01.pdf
vendor-advisory
- packetstormsecurity.com /files/171751/Mitel-MiCollab-AWV-8.1.2.4-9.1.3-Directory-Traversal-LFI.html
Sources
- CVE List CVE-2020-11798
- NVD CVE-2020-11798
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.