2 lines
3.3 KiB
JSON
2 lines
3.3 KiB
JSON
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:mitel:businesscti_enterprise:*:*:*:*:*:windows:*:*","matchCriteriaId":"40E2A7CF-E26A-414F-8AAF-B63ACC283CBA","versionEndExcluding":"6.4.15","vulnerable":true},{"criteria":"cpe:2.3:a:mitel:businesscti_enterprise:*:*:*:*:*:windows:*:*","matchCriteriaId":"0C2684E9-3D2A-4622-95DA-DA67E23D7DFF","versionEndExcluding":"7.1.2","versionStartIncluding":"7.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to user information by sending certain code, due to improper input validation of http links. A successful exploit could allow an attacker to view user information and application data."},{"lang":"es","value":"La ventana de chat de Mitel BusinessCTI Enterprise (MBC-E) Client para Windows versiones anteriores a 6.4.15 y versiones 7.x anteriores a 7.1.2, podría permitir a un atacante conseguir acceso a la información del usuario mediante el envío de determinado código, debido a una comprobación inapropiada de la entrada de enlaces http. Un explotación con éxito podría permitir a un atacante visualizar la información del usuario y los datos de la aplicación"}],"id":"CVE-2021-3176","lastModified":"2026-06-17T04:04:47.340","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"PARTIAL","baseScore":6.0,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":6.8,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.1,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-01-29T07:15:18.810","references":[{"source":"cve@mitre.org","tags":["Vendor Advisory"],"url":"https://www.mitel.com/support/security-advisories"},{"source":"cve@mitre.org","tags":["Vendor Advisory"],"url":"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0001"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mitel.com/support/security-advisories"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0001"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"nvd@nist.gov","type":"Primary"}]}
|