Riskcovery

CVE-2023-45688

Information leak via path traversal in Titan MFT and Titan SFTP servers

State
Published
Severity
Not scored
Published
Oct 16, 2023
Updated
Sep 16, 2024
Reserved
Oct 10, 2023

Read the record on cve.org

Description

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to get the size of an arbitrary file on the filesystem using path traversal in the ftp "SIZE" command

Scores

The record has no CVSS score.

Weaknesses

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

ProductVersions
Titan MFTSouth River Technologies
  • 2.0.17.2298 and earlierAffected
Titan SFTPSouth River Technologies
  • 2.0.17.2298 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.