CVE-2023-33263 - In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory

Back Back to CVE browser

HIGH

In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory

Published May 25, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.86%

Description

In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory. NOTE: this is a product from 2006.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37430
Advisory
https://packetstormsecurity.com/files/172560/WFTPD-3.25-Credential-Disclosure.html
Third Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37430		Advisory
https://packetstormsecurity.com/files/172560/WFTPD-3.25-Credential-Disclosure.html		Third Party AdvisoryVDB Entry