Lucene search

K
hackerone0x0lukeH1:232327
HistoryMay 26, 2017 - 10:41 p.m.

Ubiquiti Inc.: CRLF Injection on openvpn.svc.ubnt.com

2017-05-2622:41:44
0x0luke
hackerone.com
72

EPSS

0.003

Percentile

70.7%

The researcher reported the vulnerability CVE-2017-5868 in one of our server, it got promptly mitigated, once no oficial patch was available at the time of submit.
Ubiquiti’s employee VPN server was vulnerable to CVE-2017-5868, the issue was reported to them by me and quickly patched. Thank you Rubens and the Ubiquiti team for the fast fix!

EPSS

0.003

Percentile

70.7%