Common Weakness Enumeration

    CWE Definition / CWE-220

    CWE-220: Storage of File With Sensitive Data Under FTP Root

    The product stores sensitive data under the FTP server root with insufficient access control, which might make it accessible to untrusted parties.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-552: Files or Directories Accessible to External Parties