← Back

CVE-2021-22944

nvd nist
Published: Aug 31, 2021Modified: Nov 21, 2024

JSON object

Loading...
8.0
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.1 / Impact: 5.9
Source: NVD

Description

A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to gain the same privileges as the owner of the UniFi Protect application. This vulnerability is fixed in UniFi Protect application V1.19.0 and later.

Affected (1)

Products: Ui: Unifi Protect
Ui
1 product
Unifi Protect
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Unifi Protect
Before 1.19.0

References (2)

Source: support@hackerone.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.