CWE-220: Storage of File With Sensitive Data Under FTP Root
The product stores sensitive data under the FTP server root with insufficient access control, which might make it accessible to untrusted parties.
A kind of CWE-552 Files or Directories Accessible to External Parties.
From the CWE List. © The MITRE Corporation.