Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/03/21 8:41 a.m.60 views

Ubiquiti Inc.: Ability to log in as any user without authentication if █████████ is empty

Devices that can be monitored by airControl include a ticket based authentication system that allows access to the WebUI using a ticket id. This system had a flaw that allowed unauthenticated access without a valid ticket, given these requirements were met: 1. A device was monitored by airControl...

4.3AI score
SaveExploits0
Rows per page
Query Builder