Lucene search
HistoryJul 25, 2014 - 7:55 p.m.
CVE-2014-2227
ubiquiti networks
unifi video
same origin policy
crossdomain.xml
cve-2014-2227
6.8 Medium
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.049 Low
EPSS
Percentile
92.8%
The default Flash cross-domain policy (crossdomain.xml) in Ubiquiti Networks UniFi Video (formerly AirVision aka AirVision Controller) before 3.0.1 does not restrict access to the application, which allows remote attackers to bypass the Same Origin Policy via a crafted SWF file.
Affected configurations
Node
uiunifi_videoRange≤2.1.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| ui:unifi_video | ui unifi video | le | 2.1.3 |
Related
packetstorm
packetstorm
Ubiquiti AirVision Controller 2.1.3 Weak Settings
2014-07-25 00:00:00
prion
prion
Cross site scripting
2014-07-25 19:55:00
nvd
nvd
CVE-2014-2227
2014-07-25 19:55:03
cvelist
cvelist
CVE-2014-2227
2014-07-25 19:00:00
6.8 Medium
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.049 Low
EPSS
Percentile
92.8%
Related for CVE-2014-2227