CVE-2016-9499 | BDVDB-2026-104337 Detail

Description#

Accellion FTP server prior to version FTA_9_12_220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts and enumerate them.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-07-13Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.