CVE-2020-6857

CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key

published January 21, 2020

CVSS
—
EPSS
1%
Percentile
61.4
In the wild
Unconfirmed
What it is

CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FTP server passwords is hard-coded in the binary.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00967 · 61.4th percentile
Published
2020-01-21T16:29Z
EPSS history
Timeline
  • 21 JAN 16:29Z
    CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key
    cvelistv5