Lucene search

[email protected]CVE-2023-45687

HistoryOct 16, 2023 - 5:15 p.m.

CVE-2023-45687

2023-10-1617:15:10

CWE-384

[email protected]

web.nvd.nist.gov

session fixation

vulnerability

south river technologies

titan mft

titan sftp

authentication bypass

linux

windows

cve-2023-45687

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

JSON

A session fixation vulnerability in South River Technologies’ Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server’s authentication if they can trick an administrator into authorizating a session id of their choosing

Affected configurations

NVD

Node

southrivertechtitan_mft_serverRange<2.0.18linux

southrivertechtitan_mft_serverRange<2.0.18windows

Node

southrivertechtitan_sftp_serverRange<2.0.18linux

southrivertechtitan_sftp_serverRange<2.0.18windows

CPENameOperatorVersion
southrivertech:titan_mft_serversouthrivertech titan mft serverlt2.0.18

CPE	Name	Operator	Version
southrivertech:titan_mft_server	southrivertech titan mft server	lt	2.0.18

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux",
      "Windows"
    ],
    "product": "Titan MFT",
    "vendor": "South River Technologies",
    "versions": [
      {
        "lessThanOrEqual": "2.0.17.2298",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux",
      "Windows"
    ],
    "product": "Titan SFTP",
    "vendor": "South River Technologies",
    "versions": [
      {
        "lessThanOrEqual": "2.0.17.2298",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]