CVE-2008-5692

Опубликовано: 19 дек. 2008

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ipswitch:ws_ftp:*:*:*:*:*:*:*:*

Версия до 6.1 (включая)

cpe:2.3:a:ipswitch:ws_ftp:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:2.01:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:2.02:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:2.03:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:3.0:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:3.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:3.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:3.14:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:4.00:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:4.01:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:4.02:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:5.00:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:5.01:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:5.02:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:5.03:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:5.04:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:5.05:*:*:*:*:*:*:*

cpe:2.3:a:ipswitch:ws_ftp:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01151

Низкий

5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-qgjr-23fm-j744

github

больше 3 лет назад