地图 / UniFi Video v3.10.1 (Windows) Local Privileges Escalation to SYSTEM from arbitrary filedelete and DLL hijack vulnerabilities.

UniFi Video v3.10.1 (Windows) Local Privileges Escalation to SYSTEM from arbitrary filedelete and DLL hijack vulnerabilities.

访问控制 / 权限提升 / #530967

厂商: Ubiquiti Inc.
严重程度: 低危 · CVSS 6.7
赏金: —
弱点: 权限提升
研究员: @b0yd
披露日期: 2020-04-01
资产: UniFi Video Server
CVE: CVE-2020-8146

该报告还没有中文解读。

时间线

2019-04-08报告提交
2020-04-01公开披露

阅读 HackerOne 原文 ↗作者 @b0yd · 版权归作者与 Ubiquiti Inc. 所有

同类报告

Email Confirmation Bypass in your-store.myshopify.com which leads to privilege escalationShopify · 2020-09-15 Shopify Stocky App OAuth MisconfigurationShopify · 2019-12-11 Able to Become Admin for Any LINE Official AccountLY Corporation · 2020-03-25 Project Template functionality can be used to copy private project data, such as repository, confidential issues, snippets, and merge requestsGitLab · 2019-11-27 · $12,000 Read-only application can publish/delete fleetsX / xAI · 2021-01-04 Subdomain takeover of datacafe-cert.starbucks.comStarbucks · 2019-08-28