CVE-1999-1562

Medium

Published: 05/09/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

27th percentile - higher than 27% of all known CVEs

gFTP FTP client version 1.13 and earlier versions before 2.0.0 records a password in plaintext in (1) the log window, or (2) in a log file.

Storing passwords in plaintext poses a risk of unauthorized access to user accounts and sensitive data.

It is recommended to upgrade the gFTP client to version 2.0.0 or later to eliminate the issue of storing passwords in plaintext.

Original NVD description (English source)

gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file.