Ubiquiti Inc. · Report #350288
Two Factor Authentication Bypass
Validstatus
mediumseverity
18upvotes
16 Jul 2018disclosed
Summary
The researcher found a method to brute-force the 2FA code request in the www.ubnt.com login page. This method still requires the username/password from the account.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.