CVE-2008-5692: Ipswitch Ws FTP

Medium severity, CVSS 5.0. EPSS: 12.6% chance of exploitation in the next 30 days.

Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name.

Affected products

• Ipswitch Ws FTP: up to and including 6.1; version 1.0.5 only; version 2.01 only; version 2.02 only; version 2.03 only; version 3.0 only; …

Published 2008-12-19. Last modified 2026-06-16.