Robert Fisher

**Name of the Vulnerable Software and Affected Versions** EnterpriseDT CompleteFTP versions prior to 12.1.4 **Description** The issue allows for Remote Code Execution by leveraging a Windows user account that has SSH access. The `exec` command is always run as `SYSTEM`. **Recommendations** For versions prior to 12.1.4, update to version 12.1.4 or later to resolve the issue. As a temporary workaround, consider restricting SSH access to trusted users only until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** EnterpriseDT CompleteFTP Server versions prior to 12.1.3 **Description** The issue allows an attacker to obtain the administrator password hash due to information exposure in the Bootstrap.log file. **Recommendations** For EnterpriseDT CompleteFTP Server versions prior to 12.1.3, update to version 12.1.3 or later to resolve the issue.