7.1Alta
CVE-2025-53896Kiteworks MFT is vulnerable to Insufficient Session Expiration
Descripción
Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0.
Debilidad (CWE):
CWE-613
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| accellion | kiteworks managed file transfer | < 9.1.0 | |
| kiteworks | security-advisories | < 9.1.0 |
Referencias y parches
- https://github.com/kiteworks/security-advisories/security/advisories/GHSA-23h2-3jj8-58hm PatchThird Party Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:accellion:kiteworks_managed_file_transfer:*:*:*:*:*:*:*:*< 9.1.0