7 matches found
CVE-2023-41721
Instances of UniFi Network Application that i are run on a UniFi Gateway Console, and ii are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating a risk of access to device configuration information by a malicious actor with preexisting access to t...
CVE-2023-41721
CVE-2023-41721: Affects UniFi Network Application run on a UniFi Gateway Console with versions 7.5.176 and earlier, exposing an improper access control flaw in device adoption. This could allow a malicious actor with preexisting network access to reach device configuration information. Affected p...
CVE-2020-8267
A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect...
CVE-2020-8267
A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect...
Security feature bypass
A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect...
CVE-2020-8267
A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect...
CVE-2020-8267
CVE-2020-8267 affects UniFi Protect controller up to v1.14.10. The root cause is improper use of the access token in the controller API, allowing attackers to send authenticated messages without a valid token. The issue is fixed in UniFi Protect v1.14.11 and newer. Impact notes: it does not affec...