2 matches found
GHSA-C476-6W5Q-JW77 rclone: FTP cross-session auth-proxy backend confusion
Summary The FTP auth-proxy driver stores one obscured password per username in a server-wide map. It does not bind the credential or returned VFS to the authenticated FTP session. If two accepted credentials use the same username but resolve to different proxy backends, the later login overwrites...
7.3CVSS
SaveExploits0References5
rclone: FTP cross-session auth-proxy backend confusion
Summary The FTP auth-proxy driver stores one obscured password per username in a server-wide map. It does not bind the credential or returned VFS to the authenticated FTP session. If two accepted credentials use the same username but resolve to different proxy backends, the later login overwrites...
7.3CVSS
SaveExploits0References5Affected Software1
20