A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gain unauthorized access to user or admin accounts in the system.
| Software | From | Fixed in |
|---|---|---|
| mitel / mivoice_mx-one | 7.3 | 7.8 |
| mitel / mivoice_mx-one | 7.8 | 7.8.x |
| mitel / mivoice_mx-one | 7.8-sp1 | 7.8-sp1.x |