medium4.3Public exploit code
CVE-2019-16116
EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CompleteFTP Professional 12.1.3 - Remote Code Execution2020-07-09 · remote · windows
Impact
EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Enterprisedt | Completeftp Server | before 12.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://enterprisedt.com/products/completeftp/doc/guide/html/history.html
- https://rhinosecuritylabs.com/application-security/completeftp-server-local-privesc-cve-2019-16116/
- https://enterprisedt.com/products/completeftp/doc/guide/html/history.html
- https://rhinosecuritylabs.com/application-security/completeftp-server-local-privesc-cve-2019-16116/