A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. An attacker can supply a string using special patterns via the SCP protocol to disclose WS_FTP usernames as well as filenames.
| Software | From | Fixed in |
|---|---|---|
| progress / ws_ftp_server | - | 8.6.1 |