Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Southrivertech Component: Titan Sftp Server Clear all filters
TI-2023-24488 CVE-2023-45689 · GHSA-9vp9-v4wh-433r

Arbitrary file read via path traversal in Titan MFT and Titan SFTP servers

Priority MEDIUM 64

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker with administrative privileges to read any file on the filesystem via…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00998 Published 2023-10-16 No fix listed CWE-22
TI-2023-24487 CVE-2023-45688 · GHSA-vpx5-mhrx-64h5

Information leak via path traversal in Titan MFT and Titan SFTP servers

Priority LOW 21

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to get the size of an arbitrary file on the filesystem using path traversal in th…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00773 Published 2023-10-16 No fix listed CWE-22
TI-2023-24486 CVE-2023-45687 · GHSA-cx9h-wv2x-v9rg

Authentication bypass via session fixation in Titan MFT and Titan SFTP servers

Priority MEDIUM 43

A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server's authentication if they can trick an administrator into authori…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01384 Published 2023-10-16 No fix listed CWE-384
TI-2023-24484 CVE-2023-45685 · GHSA-7w42-6f8j-cx26

Arbitrary file write via "zip slip" in Titan MFT and Titan SFTP servers

Priority MEDIUM 45

Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesy…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01719 Published 2023-10-16 No fix listed CWE-22