Description
WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local users to gain access to the credentials.
References
- 12122 vdb-entry
- 13304 third-party-advisory
- 11749 vdb-entry
- win-ftp-password-plaintext(18247) vdb-entry
- 1012321 vdb-entry