CVE-2019-16116

CVE-2019-16116 describes an information exposure vulnerability in EnterpriseDT CompleteFTP Server versions prior to 12.1.3, allowing an attacker to obtain the administrator password hash from the Bootstrap.log file. This medium-severity vulnerability (CVSS 4.3) has a low attack complexity and requires local privileges, but can lead to a partial loss of confidentiality. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry (EDB-48657) for Remote Code Execution in a similar version exists, and community discussions indicate awareness, including a Reddit post mentioning Local Privilege Escalation.