Description
In WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing Critical Step in Multi-Factor Authentication of the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | WS_FTP Server | < 8.8.8 | 8.8.8 |
Advisories 2
- NCSC-2024-0354 Kwetsbaarheden verholpen in Progress WS_FTP server NCSC-NL (Netherlands) · Aug 30, 2024
- WID-SEC-2024-1948 Progress Software WS_FTP: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 28, 2024