This vulnerability in Mitel MiCollab (up to version 9.8 SP2) arises from insufficient input sanitization that allows an authenticated administrator to conduct local file read operations. While the attacker must already have administrative privileges, exploitation can lead to unauthorized disclosure of certain system files. The flaw does not permit modification of files or escalation of privileges beyond the existing admin level. The CVSS 3.1 base score is 4.4, reflecting a medium severity with impact limited to confidentiality and requiring local access with high privileges.

An authenticated attacker with administrative privileges can read local files that are normally restricted to admin access. The information disclosed is limited to non-sensitive system information. There is no impact on file integrity or availability, and no privilege escalation is possible through this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, administrators should monitor vendor communications for updates. Until a fix is available, restrict administrative access to trusted personnel only and follow best practices for credential management.