Security Advisory

CVE-2020-11705

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-04-12 02:43:48
Last updated 2024-08-04 11:35:13
Assigner mitre
State PUBLISHED

Description

An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certificate in .pfx format or overwrite arbitrary files via the fileName parameter.