Security Advisory

CVE-2020-8188

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-07-02 18:35:14
Last updated 2024-08-04 09:56:28
Assigner hackerone
State PUBLISHED

Description

We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and UniFi Dream Machine Pro/UNVR respectively that fixes vulnerabilities found on Protect firmware v1.13.2, v1.14.9 and prior according to the description below:View only users can run certain custom commands which allows them to assign themselves unauthorized roles and escalate their privileges.