SFTP credentials exposure

Description

On this web server, a file containing SFTP/FTP connection credentials was discovered.

Some SFTP/FTP clients save SFTP/FTP connection information in text files, such as hostname, username, and password. Sublime SFTP, for example, creates a file called sftp-config.json, while FileZilla saves the information in a file called recentservers.xml.

Mitigation measures

Restrict access to this file or remove it from the webserver.

Written by

Anandhu Krishnan

Lead Engineer

Anandhu is an accomplished Senior Lead Engineer with a strong focus on back-end development. His expertise lies in architecting and optimizing the core of software applications to ensure they run smoothly and efficiently. With a meticulous attention to detail and a deep understanding of data management and server-side operations, Anandhu has been a driving force behind the success of various back-end projects.