Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-9999

Multi-Factor Authentication Bypass in Progress WS_FTP Server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Corporation WS_FTP Server

Default version status: unaffected

  • 0 to < 8.8.9affected
  • 9.0.*unaffected

References