CVE-2023-39290 Information disclosure in n/a

What is CVE-2023-39290?

CVE-2023-39290 is a medium-severity vulnerability in n/a, published on 25 Aug 2023. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view system information.

Which versions are affected by CVE-2023-39290?

It affects 1 product.

Products include Mitel Mivoice Connect.

How do I fix CVE-2023-39290?

No fix has been published for CVE-2023-39290 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-39290 being exploited?

There is no known exploitation of CVE-2023-39290 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2022-29499 Mitel MiVoice Connect Data Validation Exploited Critical 9.8
• CVE-2022-40765 Mitel MiVoice Connect Command Injection Exploited Medium 6.8
• CVE-2022-41223 Mitel MiVoice Connect Code Injection Exploited Medium 6.8
• CVE-2023-32748 Missing authorization in n/a Critical 9.8
• CVE-2023-31457 Missing authorization in n/a Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-g7qh-5fxc-ch87.