CVE-2019-12144: Path Traversal
An issue was discovered in SSHServerAPI.dll in Progress ipswitch WSFTP Server 2018 before 8.6.1. Attackers have the ability to abuse a path traversal vulnerability using the SCP protocol. Attackers who leverage this flaw could also obtain remote code execution by crafting a payload that abuses the SITE command feature.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-12144.
What is the severity of CVE-2019-12144?
The severity of CVE-2019-12144 is critical with a CVSS score of 9.8.
How does the vulnerability in SSHServerAPI.dll affect Progress ipswitch WS_FTP Server 2018?
The vulnerability allows attackers to abuse a path traversal vulnerability using the SCP protocol, potentially leading to remote code execution.
Which versions of Progress ipswitch WS_FTP Server 2018 are affected by CVE-2019-12144?
Progress ipswitch WS_FTP Server 2018 versions before 8.6.1 are affected by CVE-2019-12144.
How can this vulnerability be fixed?
To fix this vulnerability, it is recommended to update to version 8.6.1 or later of Progress ipswitch WS_FTP Server 2018.