Design/Logic Flaw

2022-06-2412:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the “Everyone” group to read the local FTP configuration file, which includes among other information the unencrypted passwords of all FTP users.

CPENameOperatorVersion
ftp_servereq2.2.0.4

CPE	Name	Operator	Version
	ftp_server	eq	2.2.0.4

References

www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/