Back to search
CVE-2016-9499
Published: Jul 13, 2018
Modified: Aug 6, 2024
PUBLISHED
Description
Accellion FTP server prior to version FTA_9_12_220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts and enumerate them.
| Vendor | Product | Versions |
|---|---|---|
Accellion | FTP Server | affected FTA_9_12_220 - < FTA_9_12_220 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now