2005-04-13 04:00:00
mitre
PUBLISHED
FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.