Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-12146

Опубликовано: 11 июн. 2019
Источник: nvd
CVSS3: 9.1
CVSS2: 6.4
EPSS Низкий

Описание

A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. Attackers have the ability to abuse a flaw in the SCP listener by crafting strings using specific patterns to write files and create directories outside of their authorized directory.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ipswitch:ws_ftp_server:*:*:*:*:*:*:*:*
Версия до 8.6.1 (исключая)

EPSS

Процентиль: 2%
0.00014
Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 9.1
github
больше 3 лет назад

A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. Attackers have the ability to abuse a flaw in the SCP listener by crafting strings using specific patterns to write files and create directories outside of their authorized directory.

EPSS

Процентиль: 2%
0.00014
Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-22