Lucene search

K
nvd[email protected]NVD:CVE-2023-45687
HistoryOct 16, 2023 - 5:15 p.m.

CVE-2023-45687

2023-10-1617:15:10
CWE-384
web.nvd.nist.gov
session fixation
titan mft
titan sftp
linux
windows
authentication bypass

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

A session fixation vulnerability in South River Technologies’ Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server’s authentication if they can trick an administrator into authorizating a session id of their choosing

Affected configurations

NVD
Node
southrivertechtitan_mft_serverRange<2.0.18linux
OR
southrivertechtitan_mft_serverRange<2.0.18windows
Node
southrivertechtitan_sftp_serverRange<2.0.18linux
OR
southrivertechtitan_sftp_serverRange<2.0.18windows

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

Related for NVD:CVE-2023-45687