Enterprisedb · Enterprisedt Completeftp · CVE-2019-16864
**Name of the Vulnerable Software and Affected Versions**
EnterpriseDT CompleteFTP versions prior to 12.1.4
**Description**
The issue allows for Remote Code Execution by leveraging a Windows user account that has SSH access. The `exec` command is always run as `SYSTEM`.
**Recommendations**
For versions prior to 12.1.4, update to version 12.1.4 or later to resolve the issue. As a temporary workaround, consider restricting SSH access to trusted users only until a patch is applied.