CVE-2023-45687

Summary

CVE-2023-45687 is a session fixation vulnerability affecting South River Technologies' Titan MFT and Titan SFTP servers on both Linux and Windows operating systems. If successfully exploited, an attacker can manipulate an administrator into authorizing a session ID of their choosing, bypassing the server's authentication process and gaining unauthorized access. This vulnerability poses a significant risk, as it enables unauthenticated users to hijack active sessions and potentially compromise the affected system. Administrators are strongly advised to apply the available patch or workaround as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.