In WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing Critical Step in Multi-Factor Authentication of the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.
References
Link | Resource |
---|---|
https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-August-2024 | Vendor Advisory |
https://www.progress.com/ftp-server | Product |
Configurations
History
04 Sep 2024, 17:57
Type | Values Removed | Values Added |
---|---|---|
References | () https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-August-2024 - Vendor Advisory | |
References | () https://www.progress.com/ftp-server - Product | |
First Time |
Progress
Progress ws Ftp Server |
|
CPE | cpe:2.3:a:progress:ws_ftp_server:*:*:*:*:*:*:*:* | |
CWE | CWE-287 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
29 Aug 2024, 13:25
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
28 Aug 2024, 17:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-28 17:15
Updated : 2024-09-04 17:57
NVD link : CVE-2024-7745
Mitre link : CVE-2024-7745
CVE.ORG link : CVE-2024-7745
JSON object : View
Products Affected
progress
- ws_ftp_server