Test ID:	1.3.6.1.4.1.25623.1.0.144232
Category:	Privilege escalation
Title:	UniFi Protect < 1.13.3, 1.14.0 < 1.14.10 Privilege Escalation Vulnerability
Summary:	UniFi Protect is prone to a privilege escalation; vulnerability.
Description:	Summary: UniFi Protect is prone to a privilege escalation vulnerability. Vulnerability Insight: View only users can run certain custom commands which allows them to assign themselves unauthorized roles and escalate their privileges. Affected Software/OS: UniFi Protect version 1.13.2 and prior and 1.14.0 through 1.14.9. Solution: Update to version 1.13.3, 1.14.10 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-8188 https://community.ui.com/releases/Security-advisory-bulletin-012-012/1bba9134-f888-4010-81c0-b0dd53b9bda4 https://community.ui.com/releases/UniFi-Protect-1-13-3/f4be7d35-93a3-422b-8eef-122e442c00ba https://community.ui.com/releases/UniFi-Protect-1-14-10/48a8dbdd-b872-47fa-bbde-1d24ddf5d5b5
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.