PT-2018-5089
CVE-2016-9499
·
Published
2018-07-13
·
Updated
2019-10-09
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Accellion FTP server versions prior to FTA 9 12 220
Description
The issue allows an attacker to determine valid user accounts by enumerating them, as the server only returns the username in the response if the username is invalid.
Recommendations
For versions prior to FTA 9 12 220, update to version FTA 9 12 220 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾