What’s Vulnerable › Vulnerabilities

CVE-2019-16116

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-10-02 · updated 2026-06-17
• Weakness: CWE-327

Description

EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash.

Affected products

• EnterpriseDT CompleteFTP: before 12.1.3 — fixed in 12.1.3

How to fix

Upgrade to a fixed version: EnterpriseDT CompleteFTP 12.1.3. Check the vendor advisory for mitigations.

References

• https://enterprisedt.com/products/completeftp/doc/guide/html/history.html
• https://rhinosecuritylabs.com/application-security/completeftp-server-local-privesc-cve-2019-16116/
• https://enterprisedt.com/products/completeftp/doc/guide/html/history.html
• https://rhinosecuritylabs.com/application-security/completeftp-server-local-privesc-cve-2019-16116/

Get alerted when CVE-2019-16116 or the next vulnerability affects your stack