UpHeron
All vulnerabilities

Servers and applications

CVE-2020-8634

Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file management interface, resulting in files being saved with world-readable and world-writable permissions. If a sensitive system file were edited this way, a low-privilege user may escalate privileges to root.

Severity
High 7.8
Published
7 Mar 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Wing FTP ServerServers and applications · cpe:a:wftpserver:wing_ftp_server
  • Version 6.2.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-8634
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-8634