CVE-2023-45689

CVSS V2 None CVSS V3 None
Description
Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker with administrative privileges to read any file on the filesystem via path traversal
Overview
  • CVE ID
  • CVE-2023-45689
  • Assigner
  • rapid7
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-10-16T16:19:08.287Z
  • Last Modified Date
  • 2023-10-16T16:19:08.287Z
Weakness Enumerations
CWE URL
CWE-22 http://cwe.mitre.org/data/definitions/22.html
References
Reference URL Reference Tags
https://www.rapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-technologies-titan-mft-and-titan-sftp-fixed/
https://helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-45689
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45689
History
Created Old Value New Value Data Type Notes
2024-06-25 10:14:43 Added to TrackCVE