Anonymous FTP server exposed on https://acd-ext.gsfc.nasa.gov/anonftp/toms/

Disclosed by
mrxfact0r_99
Summary by National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program

This data is intended to be publicly accessible. The "ext" in acd-ext represents "external" - it contains information that is intended to be accessible outa=side of the NASA community. The data under anonftp/toms is publicly available science data; exposing directory listings is required to allow browsing of the available data, which is expected behavior

Summary by mrxfact0r_99

Hii team,

its anonymous ftp server leaking via https not normal directory listing bug i reported bug for ftp server leaking 1 year ago and its going to duplicate unfortunately but with P4 Severity so i request you to please reconsider the bug

Activity