CVE-2008-5692

CVE-2008-5692 describes an authentication bypass vulnerability in Ipswitch WS_FTP Server Manager versions prior to 6.1.1, and potentially other Ipswitch products. An unauthenticated remote attacker can read system logs by manipulating specific requests to the FTPLogServer/login.asp and FTPLogServer/LogViewer.asp pages. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it requires no authentication and has a low attack complexity, leading to a partial compromise of confidentiality (log access). While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.