The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in the improper restriction on the path name to the restricted directory. This allows attackers to write files to any location within the file system.

🗓️ 20 Oct 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 10 Views

Titan server software has improper path restrictions that allow writing files anywhere in the file system.

Reporter	Title	Published	Views	Family All 46
Circl	CVE-2023-45685	16 Oct 202320:31	–	circl
CNNVD	South River Technologies TitanFTP NextGen Security Vulnerability	16 Oct 202300:00	–	cnnvd
CNNVD	South River Technologies Titan MFT and Titan SFTP Path Traversal Vulnerabilities	16 Oct 202300:00	–	cnnvd
CNNVD	South River Technologies Titan MFT and Titan SFTP Authorization Issues Vulnerability	16 Oct 202300:00	–	cnnvd
CNNVD	South River Technologies Titan MFT and Titan SFTP Path Traversal Vulnerabilities	16 Oct 202300:00	–	cnnvd
CNNVD	South River Technologies Titan MFT and Titan SFTP Path Traversal Vulnerabilities	16 Oct 202300:00	–	cnnvd
CNNVD	South River Technologies TitanFTP NextGen Path Traversal Vulnerability	16 Oct 202300:00	–	cnnvd
CVE	CVE-2023-45685	16 Oct 202316:08	–	cve
CVE	CVE-2023-45686	16 Oct 202316:10	–	cve
CVE	CVE-2023-45688	16 Oct 202316:14	–	cve

Vulners

Node

OR

south_river_technologies titan_sftpRange<2.0.18

south_river_technologies titan_mft_nextgenRange<2.0.18

Source	Link
helpdesk	www.helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690
rapid7	www.rapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-technologies-titan-mft-and-titan-sftp-fixed/
vuldb	www.vuldb.com/
web	www.web.nvd.nist.gov/view/vuln/detail

20 Oct 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 36.3

CVSS 26.5

EPSS0.01406

Titan server software improper path restrictions restricted directory write arbitrary files file system access NextGen Titan