CVE-2014-1842 in Titan FTP Server

الملخص

بحسب MITRE

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go action with a .. (dot dot) in the search-bar value.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• حجز: 02/02/2014
• إفشاء: 29/04/2014
• الاعتدال: تمت الموافقة
• إدخال: VDB-69517
• CPE: جاهز
• CWE: CWE-22 (مؤكد)
• استغلال: تحميل
• CVSS: 5.0 (NVD)
• EPSS: 0.04787
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Agriculture, Hospital, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-1842
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-1842
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-1842/