CVE-2023-45690 Information leak via default file permissions on Titan MFT and Titan SFTP servers
Local OS users can read sensitive files due to insecure default permissions on Titan MFT and SFTP servers.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-45690?
CVE-2023-45690 is a medium-severity vulnerability in South River Technologies Titan MFT, published on 16 Oct 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's authentication to the OS to read sensitive files on the filesystem
Weakness: CWE-276
Which versions are affected by CVE-2023-45690?
It affects 2 products.
Products include Southrivertech Titan Ftp Server, Southrivertech Titan Mft Server.
How do I fix CVE-2023-45690?
No fix has been published for CVE-2023-45690 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-45690 being exploited?
There is no known exploitation of CVE-2023-45690 in the wild and no public exploit code.
Other vulnerabilities in South River Technologies Titan MFT
Sources
Also known as GHSA-mfjh-chmq-4prp.