description: An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing.
problem types: Information Exposure Through an Error Message (CWE-209)
affected:
{
product: Protect for UniFi Cloud Key Gen2 Plus
vendor: UniFi
versions:
status: affected, version: Fixed in v1.13.4-beta.5
}