PT-2020-12037

CVE-2020-10288

·

Published

2020-07-15

·

Updated

2020-07-23

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IRC5 (affected versions not specified)
Description The issue allows unauthorized access to the FTP server on port 21. When attempting to gain access, a request for a username and password is made, but any non-empty input is accepted for these fields.
Recommendations For IRC5, as a temporary workaround, consider restricting access to the FTP server on port 21 until a proper authentication mechanism is implemented. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾