CVE-2023-45687CWE-384

Authentication bypass via session fixation in Titan MFT and Titan SFTP servers

High · published October 16, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server's authentication if they can trick an administrator into authorizating a session id of their choosing

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01384 · 72.0th percentile
Weakness
CWE-384 · Session Fixation
Published
2023-10-16T16:12Z
EPSS history
Timeline
  • 16 OCT 16:12Z
    Authentication bypass via session fixation in Titan MFT and Titan SFTP servers
    cvelistv5