Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's authentication to the OS to read sensitive files on the filesystem
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NSouthrivertech Titan Ftp Server
APPSouthrivertechβ€ 2.0.16.2277Southrivertech Titan Mft Server
APPSouthrivertech< 2.0.18
π’
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Related vulnerabilities
CVE-2023-45685CRITICAL9.1ten sam produkt
Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SF...
CVE-2023-45687HIGH8.8ten sam produkt
A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Wi...
CVE-2023-22629HIGH8.8ten sam produkt
An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerabili...
CVE-2023-45688MEDIUM4.3ten sam produkt
Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allo...
CVE-2023-45689MEDIUM6.5ten sam produkt
Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows an...