Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j69g-vpf2-hpg6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

Ubiquiti UniFi 52 devices, when Hotspot mode is used, allow remote attackers to bypass intended restrictions on "free time" Wi-Fi usage by sending a /guest/s/default/ request to obtain a cookie, and then using this cookie in a /guest/s/default/login request with the byfree parameter.

Ubiquiti UniFi 52 devices, when Hotspot mode is used, allow remote attackers to bypass intended restrictions on "free time" Wi-Fi usage by sending a /guest/s/default/ request to obtain a cookie, and then using this cookie in a /guest/s/default/login request with the byfree parameter.

EPSS

Процентиль: 71%
0.00662
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 5.9
nvd
больше 6 лет назад

Ubiquiti UniFi 52 devices, when Hotspot mode is used, allow remote attackers to bypass intended restrictions on "free time" Wi-Fi usage by sending a /guest/s/default/ request to obtain a cookie, and then using this cookie in a /guest/s/default/login request with the byfree parameter.

EPSS

Процентиль: 71%
0.00662
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-284