7.1Hoch
CVE-2025-53896Kiteworks MFT is vulnerable to Insufficient Session Expiration
Beschreibung
Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0.
Schwachstellentyp (CWE):
CWE-613
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| accellion | kiteworks managed file transfer | < 9.1.0 | |
| kiteworks | security-advisories | < 9.1.0 |
Referenzen und Patches
- https://github.com/kiteworks/security-advisories/security/advisories/GHSA-23h2-3jj8-58hm PatchThird Party Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:accellion:kiteworks_managed_file_transfer:*:*:*:*:*:*:*:*< 9.1.0