Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-62gr-x8g8-959r

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.

acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.

EPSS

Процентиль: 90%
0.05311
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
около 23 лет назад

acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.

EPSS

Процентиль: 90%
0.05311
Низкий

Дефекты

CWE-287