CVE-2020-8213

2020-07-3012:53:02

CWE-209

hackerone

www.cve.org

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

38.5%

JSON

An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing.

CNA Affected

[
  {
    "product": "Protect for UniFi Cloud Key Gen2 Plus",
    "vendor": "UniFi",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in v1.13.4-beta.5"
      }
    ]
  }
]