CVE-2020-9470
Last modified
CVE-2020-9470 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. An issue was discovered in Wing FTP Server 6.2.5 before February 2020. Due to insecure permissions when handling session cookies, a local user may view the contents of the session and session_admin directories, which expose active session cookies within the Wing FTP HTTP interface and administration panel. EPSS estimates a 0.58% chance of exploitation in the next 30 days.
Description
An issue was discovered in Wing FTP Server 6.2.5 before February 2020. Due to insecure permissions when handling session cookies, a local user may view the contents of the session and session_admin directories, which expose active session cookies within the Wing FTP HTTP interface and administration panel. These cookies may be used to hijack user and administrative sessions, including the ability to execute Lua commands as root within the administration panel.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wftpserver | Wing Ftp Server | <= 6.2.5 |
References
- https://www.hooperlabs.xyz/disclosures/cve-2020-9470.phpExploit, Third Party Advisory
- https://www.hooperlabs.xyz/disclosures/cve-2020-9470.phpExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-9470?
How severe is CVE-2020-9470?
How do I fix CVE-2020-9470?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-9463Centreon 19.10 allows remote authenticated users to execute …8.8
- CVE-2020-9464A Denial-of-Service vulnerability exists in BECKHOFF Etherne…7.5
- CVE-2020-9465An issue was discovered in EyesOfNetwork eonweb 5.1 through …9.8
- CVE-2020-9466The Export Users to CSV plugin through 1.4.2 for WordPress a…6.1
- CVE-2020-9467Piwigo 2.10.1 has stored XSS via the file parameter in a /ws…5.4
- CVE-2020-9468The Community plugin 2.9.e-beta for Piwigo allows users to s…4.3
- CVE-2020-9471Umbraco Cloud 8.5.3 allows an authenticated file upload (and…8.8
- CVE-2020-9472Umbraco CMS 8.5.3 allows an authenticated file upload (and c…6.5
- CVE-2020-9473The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 h…6.6
- CVE-2020-9474The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 a…8.8
- CVE-2020-9475The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 a…7
- CVE-2020-9476ARRIS TG1692A devices allow remote attackers to discover the…7.5
Are you affected by CVE-2020-9470?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST