MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2023-45689

CVSS 6.5v3.1pub. 2023-10-16upd. 2024-11-21

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker with administrative privileges to read any file on the filesystem via path traversal

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

  • Southrivertech Titan Mft Server

    APP
    Southrivertech
    < 2.0.18

  • Southrivertech Titan Sftp Server

    APP
    Southrivertech
    < 2.0.18
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2023-45685CRITICAL9.1PL ✓same product

Path traversal przy rozpakowywaniu ZIP w Titan MFT i Titan SFTP Server

CVE-2023-45687HIGH8.8same product

A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Wi...

CVE-2023-45688MEDIUM4.3same product

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allo...

CVE-2023-45690MEDIUM4.9same product

Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user ...

CVE-2022-34005CRITICAL9.8PL ✓same vendor

RCE przez zakodowane hasło konta SA w TitanFTP NextGen