| Package | Affected versions | Patched versions |
|---|---|---|
| secure ftp applet | = 1.1= 1.2= 1.3= 1.4= 1.5= 1.6= 2.0= 2.1= 2.5= 2.6= 3.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 4.0= 4.2.0= 4.3.0= 4.4.0= 4.5.0= 4.6.0= 4.7≤ 4.8.0 |
JSCAPE Secure FTP Applet 4.8.0 and earlier does not ask the user to verify a new or mismatched SSH host key, which makes it easier for remote attackers to perform man-in-the-middle attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free