Vulnerabilities > CVE-2023-37881 - Incorrect Authorization vulnerability in Wftpserver Wing FTP Server

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

wftpserver

CWE-863

NVD

Published: 2023-09-12

Updated: 2023-09-15

Summary

Weak access control in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wing FTP Server: <= 7.2.0.

Vulnerable Configurations

Part	Description	Count
Application	Wftpserver Wftpserver Wing FTP Server 1.1 Wftpserver Wing FTP Server 1.2 Wftpserver Wing FTP Server 1.3 Wftpserver Wing FTP Server 1.4 Wftpserver Wing FTP Server 1.5 Wftpserver Wing FTP Server 1.7 Wftpserver Wing FTP Server 2.0 Wftpserver Wing FTP Server 2.1 Wftpserver Wing FTP Server 2.3 Wftpserver Wing FTP Server 2.4 Wftpserver Wing FTP Server 3.0.0 Wftpserver Wing FTP Server 3.1.0 Wftpserver Wing FTP Server 3.1.2 Wftpserver Wing FTP Server 3.2.0 Wftpserver Wing FTP Server 3.2.4 Wftpserver Wing FTP Server 3.2.8 Wftpserver Wing FTP Server 3.3.0 Wftpserver Wing FTP Server 3.3.4 Wftpserver Wing FTP Server 3.3.5 Wftpserver Wing FTP Server 3.4.0 Wftpserver Wing FTP Server 3.4.1 Wftpserver Wing FTP Server 3.4.2 Wftpserver Wing FTP Server 3.4.3 Wftpserver Wing FTP Server 3.4.5 Wftpserver Wing FTP Server 3.5.0 Wftpserver Wing FTP Server 3.5.1 Wftpserver Wing FTP Server 3.5.2 Wftpserver Wing FTP Server 3.6.0 Wftpserver Wing FTP Server 3.6.1 Wftpserver Wing FTP Server 3.6.6 Wftpserver Wing FTP Server 3.6.8 Wftpserver Wing FTP Server 3.6.9 Wftpserver Wing FTP Server 3.7.2 Wftpserver Wing FTP Server 3.7.5 Wftpserver Wing FTP Server 3.8.0 Wftpserver Wing FTP Server 3.8.5 Wftpserver Wing FTP Server 3.8.6 Wftpserver Wing FTP Server 3.8.7 Wftpserver Wing FTP Server 3.8.8 Wftpserver Wing FTP Server 3.8.9 Wftpserver Wing FTP Server 3.9.0 Wftpserver Wing FTP Server 4.0.1 Wftpserver Wing FTP Server 4.0.2 Wftpserver Wing FTP Server 4.0.3 Wftpserver Wing FTP Server 4.0.5 Wftpserver Wing FTP Server 4.0.6 Wftpserver Wing FTP Server 4.0.8 Wftpserver Wing FTP Server 4.0.9 Wftpserver Wing FTP Server 4.1.1 Wftpserver Wing FTP Server 4.1.3 Wftpserver Wing FTP Server 4.1.5 Wftpserver Wing FTP Server 4.2.0 Wftpserver Wing FTP Server 4.2.5 Wftpserver Wing FTP Server 4.2.6 Wftpserver Wing FTP Server 4.2.8 Wftpserver Wing FTP Server 4.2.9 Wftpserver Wing FTP Server 4.3.3 Wftpserver Wing FTP Server 4.3.5 Wftpserver Wing FTP Server 4.3.6 Wftpserver Wing FTP Server 4.3.8 Wftpserver Wing FTP Server 4.4.1 Wftpserver Wing FTP Server 4.4.3 Wftpserver Wing FTP Server 4.4.5 Wftpserver Wing FTP Server 4.4.6 Wftpserver Wing FTP Server 4.4.7 Wftpserver Wing FTP Server 4.4.9 Wftpserver Wing FTP Server 4.5.2 Wftpserver Wing FTP Server 4.5.3 Wftpserver Wing FTP Server 4.5.5 Wftpserver Wing FTP Server 4.5.6 Wftpserver Wing FTP Server 4.5.8 Wftpserver Wing FTP Server 4.6.0 Wftpserver Wing FTP Server 4.6.2 Wftpserver Wing FTP Server 4.6.3 Wftpserver Wing FTP Server 4.7.0 Wftpserver Wing FTP Server 4.7.1 Wftpserver Wing FTP Server 4.7.3 Wftpserver Wing FTP Server 4.7.6 Wftpserver Wing FTP Server 4.7.8 Wftpserver Wing FTP Server 4.8.0 Wftpserver Wing FTP Server 4.8.2 Wftpserver Wing FTP Server 4.8.3 Wftpserver Wing FTP Server 4.8.5 Wftpserver Wing FTP Server 4.8.7 Wftpserver Wing FTP Server 4.8.8 Wftpserver Wing FTP Server 4.9.0 Wftpserver Wing FTP Server 4.9.1 Wftpserver Wing FTP Server 4.9.2 Wftpserver Wing FTP Server 4.9.3 Wftpserver Wing FTP Server 5.0.1 Wftpserver Wing FTP Server 5.0.5 Wftpserver Wing FTP Server 5.0.6 Wftpserver Wing FTP Server 5.0.8 Wftpserver Wing FTP Server 5.0.9 Wftpserver Wing FTP Server 5.1.0 Wftpserver Wing FTP Server 5.1.2 Wftpserver Wing FTP Server 5.1.3 Wftpserver Wing FTP Server 5.1.4 Wftpserver Wing FTP Server 6.0.1 Wftpserver Wing FTP Server 6.0.2 Wftpserver Wing FTP Server 6.0.3 Wftpserver Wing FTP Server 6.0.5 Wftpserver Wing FTP Server 6.0.7 Wftpserver Wing FTP Server 6.0.8 Wftpserver Wing FTP Server 6.0.9 Wftpserver Wing FTP Server 6.1.0 Wftpserver Wing FTP Server 6.1.3 Wftpserver Wing FTP Server 6.1.5 Wftpserver Wing FTP Server 6.1.6 Wftpserver Wing FTP Server 6.1.7 Wftpserver Wing FTP Server 6.1.8 Wftpserver Wing FTP Server 6.1.9 Wftpserver Wing FTP Server 6.2.2 Wftpserver Wing FTP Server 6.2.3 Wftpserver Wing FTP Server 6.2.5 Wftpserver Wing FTP Server 6.2.6 Wftpserver Wing FTP Server 6.2.7 Wftpserver Wing FTP Server 6.4.4	121

Common Weakness Enumeration (CWE)

CWE-863 - Incorrect Authorization

References

https://www.wftpserver.com/serverhistory.htm