CVE-2019-5456

CVE-2019-5456

Vendor Unifi

Product UniFi

Weakness CWE-300

Published July 30, 2019

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later.

Key dates

02Disclosure timeline

July 30, 2019 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-5456 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/300.html

Related vulnerabilities

01Description

02Disclosure timeline

03References

04Related CVE