Titan MFT vulnerabilities

3 known vulnerabilities in Titan MFT from South River Technologies. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Titan MFT: Session Fixation

  CVE-2023-45687Oct 16, 2023South River TechnologiesEPSS 1.38%

  A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server's authentication if they can trick an administrator into authorizating a session id of their choosing

• 7.2 High severity

  Titan MFT: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-45686Oct 16, 2023South River TechnologiesEPSS 1.23%

  Insufficient path validation when writing a file via WebDAV in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal

• 9.1 Critical severity

  Titan MFT: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-45685Oct 16, 2023South River TechnologiesEPSS 1.72%

  Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal