VULNERABILITY INTELLIGENCE

CVE-2023-45689

CVSS score6.5 MEDIUM
EPSS probability1.00%
CISA KEVNot currently listed
Published2023-10-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Description

Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker with administrative privileges to read any file on the filesystem via path traversal

Weakness classification

  • cve@rapid7.com: CWE-22
  • nvd@nist.gov: CWE-22

Primary references