Ubiquiti Inc. · Report #232327
CRLF Injection on openvpn.svc.ubnt.com
Validstatus
mediumseverity
8upvotes
4 Jul 2017disclosed
Summary
The researcher reported the vulnerability CVE-2017-5868 in one of our server, it got promptly mitigated, once no oficial patch was available at the time of submit.
Ubiquiti's employee VPN server was vulnerable to CVE-2017-5868, the issue was reported to them by me and quickly patched. Thank you Rubens and the Ubiquiti team for the fast fix!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.