CVE-2021-41637

Summary

Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which includes among other information the unencrypted passwords of all FTP users.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/

References

• https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/

• ←Previous
• Next→