NetSight
IP …
high8.1

CVE-2019-5456

SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record th…

Impact

SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later.

Affected products

VendorProductAffected versions
UiUnifi Controller
through 5.10.21

Weakness classification

CWE-300CWE-255

References