Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-45689

Arbitrary file read via path traversal in Titan MFT and Titan SFTP servers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker with administrative privileges to read any file on the filesystem via path traversal

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

South River Technologies Titan MFT

Default version status: unaffected

  • 0 to ≤ 2.0.17.2298affected

South River Technologies Titan SFTP

Default version status: unaffected

  • 0 to ≤ 2.0.17.2298affected

References