title: Information leak via path traversal in Titan MFT and Titan SFTP servers
description: Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to get the size of an arbitrary file on the filesystem using path traversal in the ftp "SIZE" command
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
defaultStatus: unaffected
platforms: Linux
product: Titan MFT
vendor: South River Technologies
versions:
lessThanOrEqual: 2.0.17.2298, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
platforms: Linux
product: Titan SFTP
vendor: South River Technologies
versions:
lessThanOrEqual: 2.0.17.2298, status: affected, version: 0, versionType: semver
}
