Threats tagged 'ghsa-2rj5-gh6q-72fp'

A critical vulnerability in UniFi Access Application versions 3.3.22 through 3.4.31 allows a malicious actor with management network access to exploit a misconfiguration exposing a management API without proper authentication. This flaw enables complete compromise of confidentiality, integrity, and availability. The issue was fixed in version 4.0.21 and later.