What is CVE-2023-45687?

CVE-2023-45687 is a high-severity vulnerability in Southrivertech Titan Mft Server, classified under Session Fixation. CVSS score: 8.8/10. Published 2023-10-16.

How severe is CVE-2023-45687?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Southrivertech Titan Mft Server

CVE-2023-45687

A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server's authentication if they can trick an administrator into authorizating a session id of their choosing

EPSS: 0.012 (64.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Southrivertech Titan_mft_server
Southrivertech Titan_sftp_server
South River Technologies Titan Mft — versions 0
South River Technologies Titan Sftp — versions 0

Weakness classification (CWE)

CWE-384 — Session Fixation

References

cve@rapid7.com (Exploit, Third Party Advisory)
cve@rapid7.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-45687?: CVE-2023-45687 is a high-severity vulnerability in Southrivertech Titan Mft Server, classified under Session Fixation. CVSS score: 8.8/10. Published 2023-10-16.
How severe is CVE-2023-45687?: High severity. CVSS v3 base score is 8.8 out of 10.