CVE-2020-8635

7.8 highEPSS 0.8%

Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full privileges, and escalate privileges within the operating system by modifying system files.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2020-03-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wftpserver:wing_ftp_server

References

https://www.hooperlabs.xyz/disclosures/cve-2020-8635.php
https://www.hooperlabs.xyz/disclosures/cve-2020-8635.php

Check your stack JSON