Vulnerabilities > CVE-2019-5456 - Credentials Management vulnerability in UI Unifi Controller

047910
CVSS 8.1 - HIGH
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
high complexity
ui
CWE-255
NVD
Published: 2019-07-30
Updated: 2024-11-21

Summary

SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later.

Vulnerable Configurations

Part Description Count
Application
Ui
7

Common Weakness Enumeration (CWE)

References