Path traversal

2023-10-1617:15:00

PRIOn knowledge base

www.prio-n.com

path traversal

titan mft

titan sftp

administrative privileges

windows

linux

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.2%

JSON

Lack of sufficient path validation in South River Technologies’ Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker with administrative privileges to read any file on the filesystem via path traversal

CPENameOperatorVersion
titan_mft_serverlt2.0.18
titan_mft_serverlt2.0.18
titan_sftp_serverlt2.0.18
titan_sftp_serverlt2.0.18

Name	Operator	Version
titan_mft_server	lt	2.0.18
titan_mft_server	lt	2.0.18
titan_sftp_server	lt	2.0.18
titan_sftp_server	lt	2.0.18

References

helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690

www.rapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-technologies-titan-mft-and-titan-sftp-fixed/