CVE-2017-15272

CVE-2017-15272 describes a vulnerability in PSFTPd 10.0.4 Build 729 where the server's configuration file, PSFTPd.dat (a Microsoft Access Database), stores user passwords in cleartext. Although the file is marked as encrypted with a default password, this password is not required to extract the data, making sensitive information easily accessible. This vulnerability has a CVSS score of 5.3 (Medium), indicating a low attack complexity and local access requirement, potentially leading to low impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.