SFTP/FTP credentials exposure

Description
  • A file containing SFTP/FTP connection credentials was found on this web server.

    Some SFTP/FTP clients store SFTP/FTP connection details such as hostname, username, password in text files. For example Sublime SFTP is creating a file named sftp-config.json, FileZilla is storing the information in a file named recentservers.xml.
Remediation
  • Remove this file from the web server.
References