CVE-2025-53900: Kiteworks Managed File Transfer: güvenlik açığı

Açıklama (NVD)

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, an unfavourable definition of roles and permissions in Kiteworks MFT on managing Connections could lead to unexpected escalation of privileges for authorized users. This issue has been patched in version 9.1.0.

Özet bilgiler

Ürün

Accellion Kiteworks Managed File Transfer

CVSS v3.1

8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

%1,22 (yüzdelik 69)

CWE

CWE-267

Yama

Mevcut

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• CWE-267