Description
An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| UniFi | Protect for UniFi Cloud Key Gen2 Plus | Fixed in v1.13.4-beta.5 | — |