$SFTP/FTP credentials exposure

Description

A file containing SFTP/FTP connection credentials was found on this web server.

Some SFTP/FTP clients store SFTP/FTP connection details such as hostname, username, password in text files. For example Sublime SFTP is creating a file named sftp-config.json, FileZilla is storing the information in a file named recentservers.xml.

Remediation

Remove this file from the web server.

References