CVE-2019-12145: Path Traversal
Published Jun 11, 2019
·Updated
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WSFTP Server 2018 before 8.6.1. An attacker can supply a string using special patterns via the SCP protocol to disclose path names on the host operating system.
Affected Software
1 affected component
Ipswitch Ws Ftp Server<8.6.1
Event History
Jun 11, 2019
CVE Published
via MITRE·08:57 PM
Data Sourced
via MITRE·08:57 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-12145.
2
What is the severity of CVE-2019-12145?
The severity of CVE-2019-12145 is high, with a severity value of 7.5.
3
What is the affected software?
The affected software is Ipswitch WS FTP Server 2018 before 8.6.1.
4
How does the vulnerability manifest?
The vulnerability manifests as a Directory Traversal issue in SSHServerAPI.dll.
5
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by supplying a string using special patterns via the SCP protocol to disclose path names on the host operating system.