Windows Server 2019 FTP servers must be configured to prevent access to the system drive.
An XCCDF Rule
Description
<VulnDiscussion>The FTP service allows remote users to access shared files and directories that could provide access to system resources and compromise the system, especially if the user can gain access to the root directory of the boot drive.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-205854r991589_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Configure the FTP sites to allow access only to specific FTP shared resources. Do not allow access to other areas of the system.