PT-2018-5089 · Accellion · Accellion Ftp Server

Ashish Kamble · Publicado 2018-07-13 · Atualizado 2019-10-09 · CVE-2016-9499

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Accellion FTP server versions prior to FTA 9 12 220

Description The issue allows an attacker to determine valid user accounts by enumerating them, as the server only returns the username in the response if the username is invalid.

Recommendations For versions prior to FTA 9 12 220, update to version FTA 9 12 220 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

CWE-204

Identificadores relacionados

CVE-2016-9499

Produtos afetados

Accellion Ftp Server

Referências · 5

• 🔥 https://qualys.com/2016/12/06/qsa-2016-12-06/qsa-2016-12-06.pdf · Exploit
• https://securityfocus.com/bid/96154 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9499 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-9499 · Aviso do Fabricante
• https://kb.cert.org/vuls/id/745607 · Nota