Security Patch for CVE-2024-44685
An independent cyber security team has identified a security issue with the Admin UI of Titan SFTP and Titan MFT Sever that could involve exposure of sensitive information when configuring the SMTP settings and other places within the web UI. The issue involves sending sensitive information to the server (like SMTP configuration settings) and in responses received from the server. This effects versions 2.0.25.2426 and earlier and is addressed in version 2.0.26.2465 and higher for both Titan SFTP and Titan MFT server.
CVE-2024-44685 Fixes:
- The Titan web UI will now encrypt any sensitive information sent to the server.
- Any sensitive information is stripped from any responses from the server.