CVE-2023-45687

CVSS V2 None CVSS V3 None
Description
A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server's authentication if they can trick an administrator into authorizating a session id of their choosing
Overview
  • CVE ID
  • CVE-2023-45687
  • Assigner
  • rapid7
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-10-16T16:12:31.582Z
  • Last Modified Date
  • 2023-10-16T16:12:31.582Z
Weakness Enumerations
CWE URL
CWE-384 http://cwe.mitre.org/data/definitions/384.html
References
Reference URL Reference Tags
https://www.rapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-technologies-titan-mft-and-titan-sftp-fixed/
https://helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-45687
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45687
History
Created Old Value New Value Data Type Notes
2024-06-25 10:02:06 Added to TrackCVE