Authorization

2023-02-0321:15:00

PRIOn knowledge base

www.prio-n.com

ws_ftp server

elevation of privileges

insufficient authorization

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.1%

JSON

In Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the administrative interface due to insufficient authorization controls applied on user modification workflows.

CPENameOperatorVersion
ws_ftp_serverlt8.8

CPE	Name	Operator	Version
	ws_ftp_server	lt	8.8

References

community.progress.com/s/article/WS-FTP-Server-Critical-Security-Product-Alert-Bulletin-January-2023?popup=true

www.progress.com/ws_ftp