CVE-2024-1474

概要

参考情報

• community.progress.com/s/article/WS-FTP-Server-Service-Pack-February-2024 · Vendor Advisory
• progress.com/ws_ftp · Product

ws ftp server のその他の脆弱性

• CVE-2024-7745高 8.1In WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing Critical Step in Multi-Factor Authentication of the Web Transfer Module allows …
• CVE-2024-7744中 6.5In WS_FTP Server versions before 8.8.8 (2022.0.8), an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnera…
• CVE-2023-42659高 8.8 In WS_FTP Server versions prior to 8.7.6 and 8.8.4, an unrestricted file upload flaw has been identified. An authenticated Ad Hoc Transfer…
• CVE-2023-42657緊急 9.6 In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a directory traversal vulnerability was discovered.  An attacker could leverage this …
• CVE-2023-40049中 5.3 In WS_FTP Server version prior to 8.8.2, an unauthenticated user could enumerate files under the 'WebServiceHost' directory listing.