CVE-2020-8635

Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files

published March 6, 2020

CVSS
—
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full privileges, and escalate privileges within the operating system by modifying system files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00807 · 56.4th percentile
Published
2020-03-06T23:33Z
EPSS history
Timeline
  • 06 MAR 23:33Z
    Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files
    cvelistv5