Welcome Guest. Please Login or Register  


You are here: Index > Webuzo > General Support > Topic : Security Issue : Webuzo Insecure FTP



Threaded Mode | Print  

 Security Issue : Webuzo Insecure FTP (2 Replies, Read 18165 times)
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Hi Webuzo Team,

as I told different month ago, is very dangerous have FTP without TLS, now there is an official article who explain how is dangerous for also all users who are using the most know CMS Wordpress are at risk

https://www.wordfence.com/blog/2015/12/xss-vulnerabilities-hacking-ftp/

I hope secure TLS will be supported very soon from Webuzo and will be as default or will be realsed a guide to how activate IT.

I have tried many time in Webuzo (to activate a secure FTP) but with no success
https://www.wordfence.com/blog/2015/12/xss-vulnerabilities-hacking-ftp/



-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

Security Issue : Webuzo Insecure FTP
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
After seen the video I will STOP to use FTP.
Please Implement security in FTP!

Is already possible use SFTP but is quite complex because for also security reason mine SSH is disabled so for use SFTP I have to log in into webuzo all time and enable SFTP and disable after.

Please try to find a way to support TLS also in FTP and provide how to activate or solution for use That. Thanks



-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

Security Issue : Webuzo Insecure FTP
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Should be as indicated here:
http://www.inmotionhosting.com/support/website/server-security/disable-ftp-clear-plain-text-authentication

An option in the Webuzo to solve the FTP no secure issue


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

« Previous    Next »

Threaded Mode | Print  



Jump To :


Users viewing this topic
1 guests, 0 users.


All times are GMT. The time now is April 25, 2024, 9:06 am.

  Powered By AEF 1.0.8 © 2007-2008 Electron Inc.Queries: 11  |  Page Created In:0.047