Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qr34-4c24-g8fp

Опубликовано: 19 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.4

Описание

A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to maintain access to the corresponding livestream subsequent to such link becoming disabled.

A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to maintain access to the corresponding livestream subsequent to such link becoming disabled.

EPSS

Процентиль: 13%
0.00044
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 4.4
nvd
9 месяцев назад

A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to maintain access to the corresponding livestream subsequent to such link becoming disabled.

CVSS3: 4.4
fstec
9 месяцев назад

Уязвимость модуля Share Livestream системы видеонаблюдения UniFi Protect, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 13%
0.00044
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-284