CVE-2023-45687
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2023-45687 is a session fixation vulnerability affecting South River Technologies' Titan MFT and Titan SFTP servers on both Linux and Windows operating systems. If successfully exploited, an attacker can manipulate an administrator into authorizing a session ID of their choosing, bypassing the server's authentication process and gaining unauthorized access. This vulnerability poses a significant risk, as it enables unauthenticated users to hijack active sessions and potentially compromise the affected system. Administrators are strongly advised to apply the available patch or workaround as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions