CVE-2024-9999

Description

In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.

References

https://github.com/Confluenceservice/cve-prioritizer-action

https://github.com/subpop/cve-api

https://github.com/jonhenke/vuln-fixer-tool

https://github.com/rezearcher/x402-cve-triage

https://github.com/Corvalon/lichen

https://github.com/nexorin9/vuln-in-transit-gov

https://github.com/roshk8s/CVEIntel

https://github.com/roshannp/cvefetcher

https://github.com/Addzyyy/cvesieve

https://github.com/PrototypePrime/SCOUT-Security_and_CVE_Outbreak_Universal_Tracker

https://github.com/hawonb711-tech/CVE-Intelligence-Assistant

https://github.com/harshgdev/cve-hunter-mcp

https://github.com/tezgiden/HCLVulnerabilitiesAnalysisTool

https://github.com/grimmolf/redhat-cve-tools

https://github.com/EvgeniyPatlan/cve_diff_scanner

https://github.com/CDThornton23/PDF-Threat-Intelligence-Extraction-Service

https://www.progress.com/ftp-server

https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-November-2024

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS