high7.5
CVE-2019-25652
UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification vulnerability that allows adjacent netw…
Impact
UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification vulnerability that allows adjacent network attackers to conduct man-in-the-middle attacks by presenting a false SSL certificate during SMTP connections. Attackers can intercept SMTP traffic and obtain credentials by exploiting the insecure SSL host verification mechanism in the SMTP certificate validation process.
Affected products
| Product | Affected versions |
|---|---|
| UniFi Network Controller Before Version 5.10.22 And 5.11.X | before 5.11.18 |
Versions were read from the advisory text. No structured product data has been published for this record yet.