An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certificate in .pfx format or overwrite arbitrary files via the fileName parameter.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-04-12T02:43:48

Updated: 2024-08-04T11:35:13.564Z

Reserved: 2020-04-12T00:00:00

Link: CVE-2020-11705

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-04-12T03:15:11.007

Modified: 2024-11-21T04:58:26.613

Link: CVE-2020-11705

cve-icon Redhat

No data.