Description
A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to maintain access to the corresponding livestream subsequent to such link becoming disabled.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ubiquiti | UniFi Protect Application | 5.3.45 – < 5.3.45 | 5.3.45 |
Advisories 1
- WID-SEC-2025-0947 Ubiquiti UniFi (Protect Cameras und Application): Mehrere Schwachstellen BSI CERT-Bund (WID) · May 6, 2025