Enceladus Server Suite, developed by Mollensoft Software, is a FTP and Web server package for Microsoft Windows platforms. Enceladus Server Suite version 3.9.11 could allow a remote or local attacker to obtain sensitive information. Enceladus Server Suite does not properly restrict access to the htaccess.txt file. An attacker with permission to download files from Secure File Downloads can download the htaccess.txt file, which contains usernames and password for the to the "Secure Download" folder.