CVE-2023-45687
Authentication bypass via session fixation in Titan MFT and Titan SFTP servers
- State
- Published
- Severity
- 8.8 High
- Published
- Oct 16, 2023
- Updated
- Sep 16, 2024
- Reserved
- Oct 10, 2023
Description
A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server's authentication if they can trick an administrator into authorizating a session id of their choosing
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-384 Session Fixation
Affected Products
| Product | Versions |
|---|---|
Titan MFTSouth River Technologies |
|
Titan SFTPSouth River Technologies |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.