Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a users active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0.
According to WASC, “Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.”
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kiteworks_managed_file_transfer | Accellion | * | 9.1.0 (excluding) |