SB20200114167 - Improper access control in Cerberus FTP Server

Description

This security bulletin contains information about 1 vulnerability.

1) Improper access control (CVE-ID: CVE-2020-5196)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions in the "zip" and "unzip" functions in the FTP Server Enterprise Edition. A remote authenticated attacker can bypass the create directory, display hidden, list directories, and list files permissions, leading to creating directories or viewing hidden information.

Remediation

Install update from vendor's website.

References

• https://support.cerberusftp.com/hc/en-us/community/topics/360000164199-Announcements
• https://www.cerberusftp.com/zip-unzip-permission-bypass-vulnerability-fixed-in-cerberus-ftp-server-versions-11-0-3-and-10-0-18/
• https://www.doyler.net/security-not-included/cerberus-ftp-vulnerabilities