deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-22278
Published: 2020-11-04
Description: phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22278.pdf; https://mega.nz/file/ySQnlQSR#vXzY46mgf0CE2ysYpWpbE4O6T_g37--rtaL8pqdHcQs; https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22278.pdf
CVE: CVE-2020-26167
Published: 2020-11-04
Description: In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one.
CVSS Score: 9.8 (CRITICAL)
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-26167; https://excellium-services.com/cert-xlm-advisory/cve-2020-26167/; https://github.com/daylightstudio/FUEL-CMS/
CVE: CVE-2020-22273
Published: 2020-11-04
Description: Neoflex Video Subscription System Version 2.0 is affected by CSRF which allows the Website's Settings to be changed (such as Payment Settings)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22273.pdf; https://uploadboy.com/v630a7smyykc/539/mp4; https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22273.pdf
CVE: CVE-2020-22274
Published: 2020-11-04
Description: JomSocial (Joomla Social Network Extention) 4.7.6 allows CSV injection via a customer's profile.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1236
References: http://uploadboy.me/iypl38958pon/JomSocial.mp4.html; https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22274.pdf; https://gofile.io/?c=LsAOtL
CVE: CVE-2020-8036
Published: 2020-11-04
Description: The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/the-tcpdump-group/tcpdump/commit/e2256b4f2506102be2c6f7976f84f0d607c53d43; https://github.com/the-tcpdump-group/tcpdump/commit/e2256b4f2506102be2c6f7976f84f0d607c53d43
CVE: CVE-2020-8037
Published: 2020-11-04
Description: The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: http://seclists.org/fulldisclosure/2021/Apr/51; https://github.com/the-tcpdump-group/tcpdump/commit/32027e199368dad9508965aae8cd8de5b6ab5231; https://lists.debian.org/debian-lts-announce/2020/11/msg00018.html
CVE: CVE-2020-28049
Published: 2020-11-04
Description: An issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that - for a short time period - allows local unprivileged users to create a connection to the X server without providing proper authentication. A local attacker can thus access X server display contents and, for example, intercept keystrokes or access the clipboard. This is caused by a race condition during Xauthority file creation.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-362, CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00031.html; https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-28049; https://github.com/sddm/sddm/blob/v0.19.0/ChangeLog
CVE: CVE-2019-7356
Published: 2020-11-04
Description: Subrion CMS v4.2.1 allows XSS via the panel/phrases/ VALUE parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/intelliants/subrion/commits/develop; https://github.com/ngpentest007/CVE-2019-7356/blob/main/Subrion_4.2.1%20-%20CVE-2019-7356.pdf; https://github.com/intelliants/subrion/commits/develop
CVE: CVE-2020-27689
Published: 2020-11-04
Description: The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin credentials for the web management interface. A remote attacker could exploit this vulnerability to login and execute commands on the device, as well as upgrade the firmware image to a malicious version.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://6point6.co.uk/insights/security-advisory-relish-4g-hub-vh510/; https://6point6.co.uk/wp-content/uploads/2020/10/Relish-4G-VH510-Hub-Full-Disclosure-v1.3.pdf; https://6point6.co.uk/insights/security-advisory-relish-4g-hub-vh510/
CVE: CVE-2020-7128
Published: 2020-11-04
Description: A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04051en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04051en_us
CVE: CVE-2020-7129
Published: 2020-11-04
Description: A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
CVSS Score: 7.2 (HIGH)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04051en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04051en_us
CVE: CVE-2020-27690
Published: 2020-11-04
Description: The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains a buffer overflow within its web management portal. When a POST request is sent to /boaform/admin/formDOMAINBLK with a large blkDomain value, the Boa server crashes.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://6point6.co.uk/insights/security-advisory-relish-4g-hub-vh510/; https://6point6.co.uk/wp-content/uploads/2020/10/Relish-4G-VH510-Hub-Full-Disclosure-v1.3.pdf; https://6point6.co.uk/insights/security-advisory-relish-4g-hub-vh510/
CVE: CVE-2020-27691
Published: 2020-11-04
Description: The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 allows XSS via URLBlocking Settings, SNMP Settings, and System Log Settings.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://6point6.co.uk/insights/security-advisory-relish-4g-hub-vh510/; https://6point6.co.uk/wp-content/uploads/2020/10/Relish-4G-VH510-Hub-Full-Disclosure-v1.3.pdf; https://6point6.co.uk/insights/security-advisory-relish-4g-hub-vh510/
CVE: CVE-2020-27692
Published: 2020-11-04
Description: The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabilities within its web management portal. Attackers can, for example, use this to update the TR-069 configuration server settings (responsible for managing devices remotely). This makes it possible to remotely reboot the device or upload malicious firmware.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://6point6.co.uk/insights/security-advisory-relish-4g-hub-vh510/; https://6point6.co.uk/wp-content/uploads/2020/10/Relish-4G-VH510-Hub-Full-Disclosure-v1.3.pdf; https://6point6.co.uk/insights/security-advisory-relish-4g-hub-vh510/
CVE: CVE-2020-26207
Published: 2020-11-04
Description: DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted `.dbschema` file. The patch was released in v2.7.4.3. As a workaround, ensure `.dbschema` files from untrusted sources are not opened.
CVSS Score: 8.0 (HIGH)
CWE: CWE-502
References: https://github.com/martinjw/dbschemareader/commit/4c0ab7b1fd8c4e3140f9fd54d303f107a9c8d994; https://github.com/martinjw/dbschemareader/releases/tag/2.7.4.3; https://github.com/martinjw/dbschemareader/security/advisories/GHSA-rfjh-m356-mpqf
CVE: CVE-2020-25201
Published: 2020-11-04
Description: HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5.
CVSS Score: 7.5 (HIGH)
References: https://github.com/hashicorp/consul/blob/master/CHANGELOG.md#185-october-23-2020; https://security.gentoo.org/glsa/202208-09; https://www.hashicorp.com/blog/category/consul
CVE: CVE-2020-27387
Published: 2020-11-05
Description: An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker (with access to the FileManager) to upload and execute arbitrary PHP code by uploading a PHP payload, and then using the FileManager's rename function to provide the payload (which will receive a random name on the server) with the PHP extension, and finally executing the PHP file via an HTTP GET request to /storage/<php_file_name>. NOTE: the vendor has patched this while leaving the version number at 1.0.0-beta.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/160046/HorizontCMS-1.0.0-beta-Shell-Upload.html; https://blog.vonahi.io/whats-in-a-re-name/; https://github.com/rapid7/metasploit-framework/pull/14340
CVE: CVE-2020-7761
Published: 2020-11-05
Description: This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/absolunet/kafe/commit/c644c798bfcdc1b0bbb1f0ca59e2e2664ff3fdd0%23diff-f0f4b5b19ad46588ae9d7dc1889f681252b0698a4ead3a77b7c7d127ee657857; https://snyk.io/vuln/SNYK-JS-ABSOLUNETKAFE-1017403; https://github.com/absolunet/kafe/commit/c644c798bfcdc1b0bbb1f0ca59e2e2664ff3fdd0%23diff-f0f4b5b19ad46588ae9d7dc1889f681252b0698a4ead3a77b7c7d127ee657857
CVE: CVE-2020-7762
Published: 2020-11-05
Description: This affects the package jsreport-chrome-pdf before 1.10.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/jsreport/jsreport-chrome-pdf/commit/6750b2f77d05cb843aefc1c4a98097a3bd33a6a2; https://snyk.io/vuln/SNYK-JS-JSREPORTCHROMEPDF-1037310; https://github.com/jsreport/jsreport-chrome-pdf/commit/6750b2f77d05cb843aefc1c4a98097a3bd33a6a2
CVE: CVE-2020-7763
Published: 2020-11-05
Description: This affects the package phantom-html-to-pdf before 0.6.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/pofider/phantom-html-to-pdf/commit/b5d2da2639a49a95e0bdb3bc0c987cb6406b8259; https://snyk.io/vuln/SNYK-JS-PHANTOMHTMLTOPDF-1023598; https://github.com/pofider/phantom-html-to-pdf/commit/b5d2da2639a49a95e0bdb3bc0c987cb6406b8259
CVE: CVE-2020-15949
Published: 2020-11-05
Description: Immuta v2.8.2 is affected by one instance of insecure permissions that can lead to user account takeover.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://labs.bishopfox.com/advisories; https://labs.bishopfox.com/advisories/immuta-version-2.8.2; https://www.immuta.com/
CVE: CVE-2020-15950
Published: 2020-11-05
Description: Immuta v2.8.2 is affected by improper session management: user sessions are not revoked upon logout.
CVSS Score: 8.8 (HIGH)
CWE: CWE-613
References: https://labs.bishopfox.com/advisories; https://labs.bishopfox.com/advisories/immuta-version-2.8.2; https://www.immuta.com/
CVE: CVE-2020-15951
Published: 2020-11-05
Description: Immuta v2.8.2 accepts user-supplied project names without properly sanitizing the input, allowing attackers to inject arbitrary HTML content that is rendered as part of the application. An attacker could leverage this to redirect application users to a phishing website in an attempt to steal credentials.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://labs.bishopfox.com/advisories; https://labs.bishopfox.com/advisories/immuta-version-2.8.2; https://www.immuta.com/
CVE: CVE-2020-15952
Published: 2020-11-05
Description: Immuta v2.8.2 is affected by stored XSS that allows a low-privileged user to escalate privileges to administrative permissions. Additionally, unauthenticated attackers can phish unauthenticated Immuta users to steal credentials or force actions on authenticated users through reflected, DOM-based XSS.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://labs.bishopfox.com/advisories; https://labs.bishopfox.com/advisories/immuta-version-2.8.2; https://www.immuta.com/
CVE: CVE-2020-24849
Published: 2020-11-05
Description: A remote code execution vulnerability is identified in FruityWifi through 2.4. Due to improperly escaped shell metacharacters obtained from the POST request at the page_config_adv.php page, it is possible to perform remote code execution by an authenticated attacker. This is similar to CVE-2018-17317.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://fruitywifi.com/index_eng.html; https://gist.github.com/harsh-bothra/f899045b16bbba264628d79d52c07c22; https://github.com/xtr4nge/FruityWifi
CVE: CVE-2020-27402
Published: 2020-11-05
Description: The HK1 Box S905X3 TV Box contains a vulnerability that allows a local unprivileged user to escalate to root using the /system/xbin/su binary via a serial port (UART) connection or using adb.
CVSS Score: 7.8 (HIGH)
References: https://github.com/sickcodes/security/blob/master/advisories/SICK-2020-004.md; https://sick.codes/sick-2020-004/; https://threatpost.com/authentication-bug-android-smart-tv-data-theft/160025/
CVE: CVE-2020-27688
Published: 2020-11-05
Description: RVToolsPasswordEncryption.exe in RVTools 4.0.6 allows users to encrypt passwords to be used in the configuration files. This encryption used a static IV and key, and thus using the Decrypt() method from VISKD.cs from the RVTools.exe executable allows for decrypting the encrypted passwords. The accounts used in the configuration files have access to vSphere instances.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://github.com/matthiasmaes/CVE-2020-27688; https://www.robware.net/rvtools/; https://github.com/matthiasmaes/CVE-2020-27688
CVE: CVE-2020-27955
Published: 2020-11-05
Description: Git LFS 2.12.0 allows Remote Code Execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-427
References: http://packetstormsecurity.com/files/159923/git-lfs-Remote-Code-Execution.html; http://packetstormsecurity.com/files/164180/Git-git-lfs-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2020/Nov/1
CVE: CVE-2020-28047
Published: 2020-11-05
Description: AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting). If the recommended security configuration parameter "unique_error_numbers" is not set, remote attackers can inject arbitrary web script or HTML via 'action, cargo, panel' parameters that can lead to data leakage.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/piuppi/Proof-of-Concepts/blob/main/AudimexEE/Reflected-XSS.md; https://github.com/piuppi/Proof-of-Concepts/blob/main/AudimexEE/Reflected-XSS.md
CVE: CVE-2020-28115
Published: 2020-11-05
Description: SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute arbitrary SQL commands via the object_path parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/piuppi/Proof-of-Concepts/blob/main/AudimexEE/README.md; https://github.com/piuppi/Proof-of-Concepts/blob/main/AudimexEE/README.md
CVE: CVE-2020-25398
Published: 2020-11-05
Description: CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://github.com/h3llraiser/CVE-2020-25398; https://github.com/h3llraiser/CVE-2020-25398
CVE: CVE-2020-25399
Published: 2020-11-05
Description: Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.
CVSS Score: 7.8 (HIGH)
CWE: CWE-79
References: https://github.com/h3llraiser/CVE-2020-25399; https://github.com/h3llraiser/CVE-2020-25399
CVE: CVE-2020-26506
Published: 2020-11-05
Description: An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain control to files uploaded by administrative users. The accessed files were not visible by the low privileged users in the web GUI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-670, CWE-863
References: https://www.marmind.com/en/; https://www2.deloitte.com/de/de/pages/risk/articles/marmind-authorization-bypass.html; https://www.marmind.com/en/
CVE: CVE-2018-1725
Published: 2020-11-05
Description: IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure. IBM X-Force ID: 147440.
CVSS Score: 2.3 (LOW)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/147440; https://www.ibm.com/support/pages/node/6359945; https://exchange.xforce.ibmcloud.com/vulnerabilities/147440
CVE: CVE-2020-14222
Published: 2020-11-05
Description: HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084769; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084769
CVE: CVE-2020-14240
Published: 2020-11-05
Description: HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084789; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084789
CVE: CVE-2020-26505
Published: 2020-11-05
Description: A Stored Cross-Site Scripting (XSS) vulnerability in the “Marmind” web application with version 4.1.141.0 allows an attacker to inject code that will later be executed by legitimate users when they open the assets containing the JavaScript code. This would allow an attacker to perform unauthorized actions in the application on behalf of legitimate users or spread malware via the application. By using the “Assets Upload” function, an attacker can abuse the upload function to upload a malicious PDF file containing a stored XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.marmind.com/en/; https://www2.deloitte.com/de/de/pages/risk/articles/marmind-xss.html?nc=1; https://www.marmind.com/en/
CVE: CVE-2020-4097
Published: 2020-11-05
Description: In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a buffer overflow. This could enable an attacker to crash HCL Notes or execute attacker-controlled code on the client.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084796; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084796
CVE: CVE-2020-26507
Published: 2020-11-05
Description: A CSV Injection (also known as Formula Injection) vulnerability in the Marmind web application with version 4.1.141.0 allows malicious users to gain remote control of other computers. By providing formula code in the “Notes” functionality in the main screen, an attacker can inject a payload into the “Description” field under the “Insert To-Do” option. Other users might download this data, for example a CSV file, and execute the malicious commands on their computer by opening the file using a software such as Microsoft Excel. The attacker could gain remote access to the user’s PC.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1236
References: https://www.marmind.com/en/; https://www2.deloitte.com/de/de/pages/risk/articles/marmind-csv-injection.html; https://www.marmind.com/en/
CVE: CVE-2020-12145
Published: 2020-11-05
Description: Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhost. This makes it possible to log in to Orchestrator by introducing an HTTP HOST header set to 127.0.0.1 or localhost. Orchestrator instances that are hosted by customers –on-premise or in a public cloud provider –are affected by this vulnerability.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://www.silver-peak.com/support/user-documentation/security-advisories; https://www.silver-peak.com/support/user-documentation/security-advisories
CVE: CVE-2020-12146
Published: 2020-11-05
Description: In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server using the/debugFiles REST API.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.silver-peak.com/support/user-documentation/security-advisories; https://www.silver-peak.com/support/user-documentation/security-advisories
CVE: CVE-2020-12147
Published: 2020-11-05
Description: In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries against the Orchestrator database using the /sqlExecution REST API, which had been used for internal testing.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.silver-peak.com/support/user-documentation/security-advisories; https://www.silver-peak.com/support/user-documentation/security-advisories
CVE: CVE-2020-13661
Published: 2020-11-05
Description: Telerik Fiddler through 5.0.20202.18177 allows attackers to execute arbitrary programs via a hostname with a trailing space character, followed by --utility-and-browser --utility-cmd-prefix= and the pathname of a locally installed program. The victim must interactively choose the Open On Browser option. Fixed in version 5.0.20204.
CVSS Score: 8.8 (HIGH)
References: https://www.nagenrauft-consulting.com/blog/; https://www.telerik.com/support/whats-new/fiddler/release-history/fiddler-v5.0.20204; https://www.telerik.com/support/whats-new/release-history
CVE: CVE-2020-8267
Published: 2020-11-05
Description: A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect v1.14.11 and newer.This issue does not impact UniFi Cloud Key Gen 2 plus.This issue does not impact UDM-Pro customers with UniFi Protect stopped.Affected Products:UDM-Pro firmware 1.7.2 and earlier.UNVR firmware 1.3.12 and earlier.Mitigation:Update UniFi Protect to v1.14.11 or newer version; the UniFi Protect controller can be updated through your UniFi OS settings.Alternatively, you can update UNVR and UDM-Pro to:- UNVR firmware to 1.3.15 or newer.- UDM-Pro firmware to 1.8.0 or newer.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://community.ui.com/releases/UniFi-Dream-Machine-Firmware-1-8-0/deabc255-a081-49ba-8f51-131f3a13000a; https://community.ui.com/releases/UniFi-Protect-1-14-11/928e6fac-afeb-49c2-93a5-1b3066bf2bbf; https://community.ui.com/releases/UniFi-Protect-NVR-Firmware-1-3-15/c2a783a6-c996-43d9-ab95-8c97ae05a98f
CVE: CVE-1999-1594
Published: 2020-11-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-1999-1595
Published: 2020-11-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-1999-1596
Published: 2020-11-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-1999-1597
Published: 2020-11-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-1999-1598
Published: 2020-11-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2000-1248
Published: 2020-11-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none