Ubiquiti Inc. · Report #519582
Catch mails sent to an SMTP Server over SSL using an Evil SMTP Server
Validstatus
highseverity
13upvotes
22 Aug 2019disclosed
Summary
A malicious actor setting up an SMTP proxy server between the UniFi Controller and their actual SMTP server can record their SMTP credentials for malicious use.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.