CVE-2023-45689CWE-22

Arbitrary file read via path traversal in Titan MFT and Titan SFTP servers

published October 16, 2023

CVSS
—
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker with administrative privileges to read any file on the filesystem via path traversal

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00998 · 62.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-10-16T16:19Z
EPSS history
Timeline
  • 16 OCT 16:19Z
    Arbitrary file read via path traversal in Titan MFT and Titan SFTP servers
    cvelistv5