{"id":"CVE-2020-8213","aliases":["EUVD-2020-29088","GHSA-532p-r74j-rw26"],"status":"published","title":"An information exposure vulnerability exists in UniFi Protect v1.13.3 and prior that allowed...","description":"An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0111,"percentile":0.66164,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-209"],"published":"2020-07-30T12:53:02Z","modified":"2026-06-17T03:26:03Z","products":[{"vendor":"ui","product":"unifi_protect"},{"vendor":"unifi","product":"protect for unifi cloud key gen2 plus"}],"references":[{"url":"https://community.ui.com/releases/Security-advisory-bulletin-013-013/56d4d616-4afd-40ee-863f-319b7126ed84","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8213"},{"url":"https://community.ui.com/questions/CloudKey-Plus-CK-How-to-get-on-the-beta-release-channel/c26acdf8-321c-49b6-8f0d-9d7d99bf6aee"},{"url":"https://community.ui.com/releases/UniFi-Protect-1-13-4-beta-2/405d4cf9-e538-48d1-8825-36657a692f3f"},{"url":"https://github.com/advisories/GHSA-532p-r74j-rw26"}],"sources":{"cve":[{"id":"CVE-2020-8213","description":"An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing.","status":"published","published":"2020-07-30T12:53:02Z","modified":"2024-08-04T09:56:27.443Z","cwes":["CWE-209"],"updated_at":"2026-11-02T14:35:50.545879Z"}],"euvd":[{"id":"EUVD-2020-29088","description":"An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing.","status":"published","published":"2020-07-30T12:53:02Z","modified":"2024-08-04T09:56:27Z","updated_at":"2026-11-03T03:07:58.055641Z"}],"ghsa":[{"id":"GHSA-532p-r74j-rw26","title":"An information exposure vulnerability exists in UniFi Protect v1.13.3 and prior that allowed...","description":"An information exposure vulnerability exists in UniFi Protect v1.13.3 and prior that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing.","status":"published","published":"2022-05-24T17:24:45Z","modified":"2023-01-29T05:04:01Z","updated_at":"2026-11-02T14:45:27.054092Z"}],"nvd":[{"id":"CVE-2020-8213","description":"An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing.","status":"published","published":"2020-07-30T13:15:11.61Z","modified":"2026-06-17T03:26:03.98Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:06:10.994748Z"}]}}