PT-2020-19981 · Ubiquiti · Unifi Video Controller

Published 2020-04-01 · Updated 2021-07-21 · CVE-2020-8145

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions UniFi Video Controller versions prior to 3.9.6

Description The UniFi Video Server web interface configuration restore functionality at the "backup" and "wizard" endpoints does not implement sufficient privilege checks. Low privileged users, belonging to the PUBLIC GROUP or CUSTOM GROUP groups, can access these endpoints and overwrite the current application configuration. This can be abused for various purposes, including adding new administrative users.

Recommendations For versions prior to 3.9.6, update to UniFi Video Controller version 3.9.6 or newer to resolve the issue. As a temporary workaround, consider restricting access to the "backup" and "wizard" endpoints to prevent low privileged users from overwriting the application configuration.

Fix

Related Identifiers

CVE-2020-8145

Affected Products

Unifi Video Controller

References · 4

• https://osv.dev/vulnerability/CVE-2020-8145 · Vendor Advisory
• https://community.ui.com/releases/Security-advisory-bulletin-006-006/3cf6264e-e0e6-4e26-a331-1d271f84673e · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8145 · Security Note
• https://t.me/cvenotify/2360 · Telegram Post