CoreCVE
Back

HIGH

Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an authenticated attacker to create files, display hidden files, list directories, and list files without the permission to zip and download (or unzip and upload) files

Published Jan 14, 2020

Description

Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an authenticated attacker to create files, display hidden files, list directories, and list files without the permission to zip and download (or unzip and upload) files. There are multiple ways to bypass certain permissions by utilizing the zip and unzip features. As a result, users without permission can see files, folders, and hidden files, and can create directories without permission.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (4)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 14, 2020
Updated Aug 4, 2024
Reserved Jan 2, 2020
Link CVE-2020-5196
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-5196
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-5196
ENISA EUVD
Assigner mitre
Published Jan 14, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-26440
EUVD-2020-26440