CVE-2019-16116

Published: Oct 2, 2019Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash.

Affected (1)

Products: Enterprisedt: Completeftp Server

Enterprisedt

1 product

Completeftp Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Enterprisedt Completeftp Server	Before 12.1.3

Related CWEs

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (4)

https://enterprisedt.com/products/completeftp/doc/guide/html/history.html

Source: cve@mitre.org

Release NotesVendor Advisory

https://rhinosecuritylabs.com/application-security/completeftp-server-local-privesc-cve-2019-16116/

Source: cve@mitre.org

ExploitThird Party Advisory

https://enterprisedt.com/products/completeftp/doc/guide/html/history.html

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://rhinosecuritylabs.com/application-security/completeftp-server-local-privesc-cve-2019-16116/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.