VULNERABILITY INTELLIGENCE
CVE-2002-2417
CVSS score10 HIGH
EPSS probability4.18%
CISA KEVNot currently listed
Published2002-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.
Weakness classification
- CWE-287: Improper Authentication