PT-2020-20245 · Wing Ftp · Wing Ftp Server

Published 2020-03-06 · Updated 2021-07-21 · CVE-2020-8635

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wing FTP Server version 6.2.3

Description The issue allows local users to create FTP users with full privileges and escalate privileges within the operating system by modifying system files due to insecure permissions set on installation directories and configuration files.

Recommendations For Wing FTP Server version 6.2.3, manually adjust the permissions of the installation directories and configuration files to prevent unauthorized access and modifications.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-8635

Affected Products

Wing Ftp Server

References · 4

• 🔥 https://github.com/Al1ex/CVE-2020-8635 · Exploit
• 🔥 https://hooperlabs.xyz/disclosures/cve-2020-8635.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-8635 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8635 · Vendor Advisory