CVE-2019-5456 - SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later

Back Back to CVE browser

HIGH

SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later

Published Jul 30, 2019

8.1

HIGH

CVSS 3.1

EPSS 1.29%

Description

SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later.

Affected products

Vendor UniFi Product UniFi Default
n/a
- Version
  <= 5.10.21
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

UniFi

n/a

Version	Status	Constraints
<= 5.10.21	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-255

CWE-300

References (4)

https://community.ui.com/releases/862b962b-55f6-4324-96be-610f647d5c1c
x_refsource_CONFIRMRelease NotesVendor Advisory
https://community.ui.com/releases/9f698d0b-8279-40d3-9f1a-d36db4813124
x_refsource_CONFIRMRelease NotesVendor Advisory
https://community.ui.com/releases/Security-Advisory-Bulletin-003-003/982bbaa8-2a07-4f81-a5f6-0bb84753f391
x_refsource_CONFIRMVendor Advisory
https://hackerone.com/reports/519582
x_refsource_MISCPermissions Required

Link	Providers	Tags
https://community.ui.com/releases/862b962b-55f6-4324-96be-610f647d5c1c		x_refsource_CONFIRMRelease NotesVendor Advisory
https://community.ui.com/releases/9f698d0b-8279-40d3-9f1a-d36db4813124		x_refsource_CONFIRMRelease NotesVendor Advisory
https://community.ui.com/releases/Security-Advisory-Bulletin-003-003/982bbaa8-2a07-4f81-a5f6-0bb84753f391		x_refsource_CONFIRMVendor Advisory
https://hackerone.com/reports/519582		x_refsource_MISCPermissions Required

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hackerone

Published Jul 30, 2019

Updated Aug 4, 2024

Reserved Jan 4, 2019

Link CVE-2019-5456

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-5456

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-5456