CVE-2021-41637

2022-06-2411:44:42

mitre

www.cve.org

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the “Everyone” group to read the local FTP configuration file, which includes among other information the unencrypted passwords of all FTP users.

References

www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/