CVE-2021-41637

Name of the Vulnerable Software and Affected Versions MELAG FTP Server version 2.2.0.4

Description The issue concerns weak access control permissions that allow the "Everyone" group to read the local FTP configuration file. This file contains unencrypted passwords of all FTP users, among other information.

Recommendations For MELAG FTP Server version 2.2.0.4, consider restricting access to the local FTP configuration file to prevent unauthorized reading of sensitive information, including unencrypted passwords, until a patch or fix is available. As a temporary workaround, restrict the "Everyone" group's permissions to minimize the risk of exploitation.