Описание
UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB. Applicable Cloud Keys that are both (1) running UniFi OS 3.1 and (2) hosting the UniFi Network application. "Applicable Cloud Keys" include the following: Cloud Key Gen2 and Cloud Key Gen2 Plus.
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:ui:unifi_os:3.1:*:*:*:*:*:*:*
Одно из
cpe:2.3:h:ui:cloud_key_gen2:-:*:*:*:*:*:*:*
cpe:2.3:h:ui:cloud_key_gen2_plus:-:*:*:*:*:*:*:*
EPSS
Процентиль: 10%
0.00036
Низкий
9 Critical
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-863
Связанные уязвимости
CVSS3: 9
github
больше 2 лет назад
UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB. Applicable Cloud Keys that are both (1) running UniFi OS 3.1 and (2) hosting the UniFi Network application. "Applicable Cloud Keys" include the following: Cloud Key Gen2 and Cloud Key Gen2 Plus.
EPSS
Процентиль: 10%
0.00036
Низкий
9 Critical
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-863