PT-2019-12655 · Ipswitch · Ws Ftp Server
CVE-2019-12143
·
Publicado
2019-06-11
·
Atualizado
2023-10-11
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Progress ipswitch WS FTP Server versions prior to 8.6.1
Description
A Directory Traversal issue was discovered in SSHServerAPI.dll. An attacker can supply a string using special patterns via the SCP protocol to disclose WS FTP usernames as well as filenames.
Recommendations
For versions prior to 8.6.1, update to version 8.6.1 or later to resolve the issue.
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ws Ftp Server