CVE-2023-39290

Name of the Vulnerable Software and Affected Versions Mitel MiVoice Connect versions through R19.3 SP3 (22.24.5800.0)

Description A vulnerability in the Edge Gateway component could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view system information.

Recommendations For versions through R19.3 SP3 (22.24.5800.0), consider updating to a version later than R19.3 SP3 (22.24.5800.0) to resolve the issue. As a temporary workaround, restrict access to the Edge Gateway component to minimize the risk of exploitation.