Ubiquiti Inc. · Report #129698
UniFi Video Server - Broken access control on system configuration
Validstatus
highseverity
12upvotes
7 Nov 2018disclosed
Summary
In UniFi Video Server prior to 3.7.0, an attacker with user permissions can download the Backup and Support files.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.