Vulnerability in Wftpserver Wing_ftp_server
CVE-2020-8635
Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full privileges, and escalate privileges withi…
EPSS: 0.008 (52.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Wftpserver Wing_ftp_server — versions 6.2.3
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-8635?
- CVE-2020-8635 is a high-severity vulnerability in Wftpserver Wing_ftp_server, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.8/10. Published 2020-03-07.
- How severe is CVE-2020-8635?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2020-8635 known to be exploited?
- 26 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.