CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Coffeecup_direct_ftp | Coffeecup_software | 1.0 (including) | 1.0 (including) |
| Coffeecup_free_ftp | Coffeecup_software | 1.0 (including) | 1.0 (including) |