Session fixation

2023-10-1617:15:00

PRIOn knowledge base

www.prio-n.com

south river technologies

linux

windows

authentication bypass

administrator authorization

session id

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

JSON

A session fixation vulnerability in South River Technologies’ Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server’s authentication if they can trick an administrator into authorizating a session id of their choosing

CPENameOperatorVersion
titan_mft_serverlt2.0.18
titan_mft_serverlt2.0.18
titan_sftp_serverlt2.0.18
titan_sftp_serverlt2.0.18

Name	Operator	Version
titan_mft_server	lt	2.0.18
titan_mft_server	lt	2.0.18
titan_sftp_server	lt	2.0.18
titan_sftp_server	lt	2.0.18

References

helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690

www.rapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-technologies-titan-mft-and-titan-sftp-fixed/