NetSight
medium6.5

CVE-2024-9999

In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the …

Impact

In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.

Affected products

ProductAffected versions
WS FTP Server
before 8.8.9

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References