CVE-2014-2226 Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.
LowCVSS 2.6
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ui unifi controller | <= 2.4.6 | No fix listed |