CVE-2020-8213 - CVE House
Back to Database
Status published Medium CVE-2020-8213

An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5...

Vulnerability Description

An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-8213

Credits & Attribution

No credits recorded in the NVD database.

References

More from UniFi

View All →
CVE-2019-5456
SMTP MITM refers to a malicious actor setting up an...
High 8.1

Affected Vendor

Affected Software

Protect for UniFi Cloud Key Gen2 Plus
Vulnerable Versions:
Fixed in v1.13.4-beta.5

Timeline

Official Publish: July 30th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-209

MITRE ATT&CK TTPs

T1592 Gather Victim Host Information
Reconnaissance
T1083 File and Directory Discovery
Discovery
T1552 Unsecured Credentials
Credential Access
T1212 Exploitation for Defense Evasion
Defense Evasion
T1005 Data from Local System
Collection