Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-24029

In Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the administrative interface due to insufficient authorization controls applied on user modification workflows.

Published

2023-02-03T21:15:11.757

Last Modified

2025-03-26T19:15:23.760

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses

Type: Primary
CWE-863
Type: Secondary
CWE-863

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	progress	ws_ftp_server	< 8.8	Yes

References

https://community.progress.com/s/article/WS-FTP-Server-Critical-Security-Product-Alert-Bulletin-January-2023?popup=true Vendor Advisory ([email protected])
https://www.progress.com/ws_ftp Product, Vendor Advisory ([email protected])
https://community.progress.com/s/article/WS-FTP-Server-Critical-Security-Product-Alert-Bulletin-January-2023?popup=true Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.progress.com/ws_ftp Product, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)