CVE-2023-45687highCWE-384

CVE-2023-45687: high-severity vulnerability in South River Technologies Titan MFT

Authentication bypass via session fixation in Titan MFT and Titan SFTP servers

Published · Updated

Follow this CVE+ Monitor Titan MFT+ Monitor Titan SFTP

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 1.4%
A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server's authentication if they can trick an administrator into authorizating a session id of their choosing
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
South River Technologies · Titan MFTSouth River Technologies · Titan SFTP
Related CVEs — South River Technologies Titan MFT

In the same product, most dangerous first.

CVE-2023-45690—Information leak via default file permissions on Titan MFT and Titan SFTP serversEPSS 1.8%CVE-2023-45685CRITICALArbitrary file write via "zip slip" in Titan MFT and Titan SFTP serversEPSS 1.7%CVE-2023-45686HIGHArbitrary file write via WebDAV path traversal in Titan MFT and Titan SFTP serversEPSS 1.2%CVE-2023-45689—Arbitrary file read via path traversal in Titan MFT and Titan SFTP serversEPSS 1.0%CVE-2023-45688—Information leak via path traversal in Titan MFT and Titan SFTP serversEPSS 0.8%