CVE-2019-12143

MEDIUM

Progress ipswitch WS_FTP Server <8.6.1 - Path Traversal

Title source: llm
STIX 2.1

Description

A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. An attacker can supply a string using special patterns via the SCP protocol to disclose WS_FTP usernames as well as filenames.

References (1)

Core 1
Core References
Release Notes, Vendor Advisory x_refsource_confirm
https://docs.ipswitch.com/WS_FTP_Server2018/ReleaseNotes/index.htm#49242.htm

Scores

CVSS v3 5.3
EPSS 0.0001
EPSS Percentile 2.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-22
Status published
Products (1)
progress/ws_ftp_server < 8.6.1
Published Jun 11, 2019
Tracked Since Feb 18, 2026