CWE-220
Storage of File With Sensitive Data Under FTP Root
The product stores sensitive data under the FTP server root with insufficient access control, which might make it accessible to untrusted parties.
Mitigation
Phases: Implementation, System Configuration
Description:
- Avoid storing information under the FTP root directory.
Mitigation
Phase: System Configuration
Description:
- Access control permissions should be set to prevent reading/writing of sensitive files inside/outside of the FTP directory.
No CAPEC attack patterns related to this CWE.