Back to CWE list
CWE-220
Storage of File With Sensitive Data Under FTP Root
Variant
Draft
Description
The product stores sensitive data under the FTP server root with insufficient access control, which might make it accessible to untrusted parties.
Parent Weaknesses (ChildOf)
Common Consequences
Scope
Confidentiality
Impact
Read Application Data
Potential Mitigations
Implementation
System Configuration
Avoid storing information under the FTP root directory.
System Configuration
Access control permissions should be set to prevent reading/writing of sensitive files inside/outside of the FTP directory.
Applicable Platforms
Not Language-Specific
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now