Design/Logic Flaw

2022-06-0721:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.4%

JSON

DISPUTED FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does not consider this a vulnerability.

CPENameOperatorVersion
filezilla_clienteq3.59.0

CPE	Name	Operator	Version
	filezilla_client	eq	3.59.0

References

whichbuffer.medium.com/filezilla-client-cleartext-storage-of-sensitive-information-in-memory-vulnerability-83958c1e1643

youtu.be/ErZl1i7McHk

youtu.be/eSlfQQytIq0