Lucene search

K
hackerone0x0lukeH1:232327
HistoryMay 26, 2017 - 10:41 p.m.

Ubiquiti Inc.: CRLF Injection on openvpn.svc.ubnt.com

2017-05-2622:41:44
0x0luke
hackerone.com
70

0.003 Low

EPSS

Percentile

70.8%

The researcher reported the vulnerability CVE-2017-5868 in one of our server, it got promptly mitigated, once no oficial patch was available at the time of submit.
Ubiquiti’s employee VPN server was vulnerable to CVE-2017-5868, the issue was reported to them by me and quickly patched. Thank you Rubens and the Ubiquiti team for the fast fix!

0.003 Low

EPSS

Percentile

70.8%