CVE-2019-12143: Path Traversal
Published Jun 11, 2019
·Updated
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WSFTP Server 2018 before 8.6.1. An attacker can supply a string using special patterns via the SCP protocol to disclose WSFTP usernames as well as filenames.
Affected Software
1 affected component
Progress Ws Ftp Server<8.6.1
Event History
Jun 11, 2019
CVE Published
via MITRE·08:54 PM
Data Sourced
via MITRE·08:54 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-12143.
2
What is the severity of CVE-2019-12143?
The severity of CVE-2019-12143 is medium with a CVSS score of 5.3.
3
What is the affected software?
The affected software is Progress ipswitch WS_FTP Server 2018 before 8.6.1.
4
How does the vulnerability manifest?
The vulnerability is a Directory Traversal issue in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1, allowing an attacker to disclose usernames and filenames.
5
Is there a fix available for this vulnerability?
Yes, a fix is available. Please refer to the vendor's documentation for further information.