Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-1939
flashfxp
ftp
passwords
plaintext
vulnerability
nvd
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.4%
FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.
Affected configurations
Node
flashfxpflashfxpMatch1.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| flashfxp:flashfxp | flashfxp | eq | 1.4 |
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.4%
Related for CVE-2002-1939