Medium · 6.5 CVE-2023-37879 EUVD-2023-41753GHSA-gh7h-r3ff-2vq6

Exposed Session Variable in Wing FTP Server <= 7.2.0

Published Sep 12, 2023 · Updated Sep 24, 2024 · Assigned by NCSC.ch

Vendor: Wing FTP Server Product: Wing FTP Server

Description

Insecure storage of sensitive information in Wing FTP Server (User Web Client) allows information elicitation.This issue affects Wing FTP Server: <= 7.2.0.

Affected products

Vendor	Product	Affected	Fixed
Wing FTP Server	Wing FTP Server	<= 7.2.0	—

References

https://www.wftpserver.com/serverhistory.htm