CVE-2019-9648

An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674

published March 22, 2019

CVSS

—

EPSS

14%

Percentile

96.6

In the wild

Unconfirmed

What it is

An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned information.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.14330 · 96.6th percentile
Published: 2019-03-22T18:49Z

EPSS history

Timeline

22 MAR 18:49Z
An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674
cvelistv5