Storage of File With Sensitive Data Under FTP Root

Opis

The product stores sensitive data under the FTP server root with insufficient access control, which might make it accessible to untrusted parties.

Skutki

• Confidentiality

  Read Application Data

Zapobieganie

• Implementation, System Configuration

  Avoid storing information under the FTP root directory.

• System Configuration

  Access control permissions should be set to prevent reading/writing of sensitive files inside/outside of the FTP directory.

Słabość nadrzędna

• CWE-552 Files or Directories Accessible to External Parties

Kiedy powstaje

• Operation
• Architecture and Design — COMMISSION: This weakness refers to an incorrect design related to an architectural security tactic.

Dotyczy

Not Language-Specific