PT-2024-31212
CVE-2024-44685
·
تاريخ النشر
2024-09-13
·
تاريخ التحديث
2024-09-13
الوصف من
CVSS 3.1
5.0
متوسطةالمقاييسAV:P/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Titan SFTP and Titan MFT Server versions 2.0.25.2426 and earlier
Description
The issue concerns the exposure of sensitive information, including passwords, in clear text within the JSON response when configuring SMTP settings via the Web UI. This sensitive information exposure occurs in Titan SFTP and Titan MFT Server.
Recommendations
For versions 2.0.25.2426 and earlier, consider restricting access to the Web UI until a fix is available, and avoid configuring SMTP settings via the Web UI to minimize the risk of sensitive information exposure.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾