CVE-2023-45690

Published: Oct 16, 2023Modified: Nov 21, 2024

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's authentication to the OS to read sensitive files on the filesystem

Affected (2)

Products: Southrivertech: Titan Ftp Server, Titan Mft Server

Southrivertech

2 products

Titan Ftp Server

Titan Mft Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Southrivertech Titan Ftp Server	Up to 2.0.16.2277

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Southrivertech Titan Mft Server	Before 2.0.18

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (4)

https://helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690

Source: cve@rapid7.com

Vendor Advisory

https://www.rapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-technologies-titan-mft-and-titan-sftp-fixed/

Source: cve@rapid7.com

ExploitThird Party Advisory

https://helpdesk.southrivertech.com/portal/en/kb/articles/security-patch-for-issues-cve-2023-45685-through-cve-2023-45690

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.rapid7.com/blog/post/2023/10/16/multiple-vulnerabilities-in-south-river-technologies-titan-mft-and-titan-sftp-fixed/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.