CVE-2024-44685

Name of the Vulnerable Software and Affected Versions Titan SFTP and Titan MFT Server versions 2.0.25.2426 and earlier

Description The issue concerns the exposure of sensitive information, including passwords, in clear text within the JSON response when configuring SMTP settings via the Web UI. This sensitive information exposure occurs in Titan SFTP and Titan MFT Server.

Recommendations For versions 2.0.25.2426 and earlier, consider restricting access to the Web UI until a fix is available, and avoid configuring SMTP settings via the Web UI to minimize the risk of sensitive information exposure.