Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-40049 EUVD-2023-44656GHSA-3c55-6x27-8w5g

WS_FTP Server Information Disclosure via Directory Listing

Published Sep 27, 2023 · Updated Sep 24, 2024 · Assigned by ProgressSoftware

Vendor: Progress Software Product: WS_FTP Server

Description

In WS_FTP Server version prior to 8.8.2,

an unauthenticated user could enumerate files under the 'WebServiceHost' directory listing.

Affected products

VendorProductAffectedFixed
Progress Software WS_FTP Server 8.8.0 – < 8.8.2 8.8.2

Advisories 1

References