Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-45688

Information leak via path traversal in Titan MFT and Titan SFTP servers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to get the size of an arbitrary file on the filesystem using path traversal in the ftp "SIZE" command

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

South River Technologies Titan MFT

Default version status: unaffected

  • 0 to ≤ 2.0.17.2298affected

South River Technologies Titan SFTP

Default version status: unaffected

  • 0 to ≤ 2.0.17.2298affected

References