Threats tagged 'ghsa-6jv7-v4x3-vx24'

An improper authentication vulnerability exists in the Web Transfer Module of Progress Software WS_FTP Server on Windows. Versions prior to 2024.0.7 and 2025.0.4 are affected. This flaw allows an attacker who has obtained a user's password to access certain files associated with that account without completing multi-factor authentication.