Vulnerability in Fal Sftp Project

CVE-2014-8327

The fal_sftp extension before 0.2.6 for TYPO3 uses weak permissions for sFTP driver files and folders, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

EPSS: 0.011 (61.7th percentile) — read the EPSS interpretation.

Affected products

Fal_sftp_project Fal_sftp — versions 0.2.4
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_CONFIRM, Patch)