Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.2
CVE-2023-24029: In Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the administrative interface due to insufficient authorization controls applied on user...
CVE-2023-24029 · published 3 years ago
Summary
In Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the administrative interface due to insufficient authorization controls applied on user modification workflows.
What to do
- Update progress ws_ftp_server to version 8.8 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| progress | ws_ftp_server |
< 8.8 cpe:2.3:a:progress:ws_ftp_server:*:*:*:*:*:*:*:* |
Original advisory text
In Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the administrative interface due to insufficient authorization controls applied on user...
In Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the administrative interface due to insufficient authorization controls applied on user modification workflows.
References
- https://community.progress.com/s/article/WS-FTP-Server-Critical-Security-Product... Vendor Advisory
- https://www.progress.com/ws_ftp Product Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-863Incorrect Authorization
Timeline
Published3 Feb 2023
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2023-24029 · NVD
Track software like this
Free during beta