U.S. Dept Of Defense · Report #192321
Open FTP server on a DoD system
Validstatus
highseverity
14upvotes
8 Oct 2019disclosed
Summary
An open FTP panel was discovered which allowed any attackers to connect and upload their files. Initial probing discovered it was still being used by multiple people confirming this was still in use.
How it was found
Summary:
I don't know if this qualifies but during my search I discovered an open FTP panel that I was able to successfully log into.
Using any FTP program, I used File zilla and then entered ████ as my host then connected. Then I was able to look through any of the files. I noticed the last modified file was quite recent leading me to believe it's still in us