Beveiligingsadvies

CVE-2008-5692

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2008-12-19 18:00:00
Laatst bijgewerkt 2024-08-07 11:04:44
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name.