Vendor
Syncplify
4 known vulnerabilities.
2 results · Clear filters · Feed
-
High 8.1
Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing
Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to evade per-path permission overrides by exploiting case-insensitive filesystem path resolution and 8.3 short names. Attackers can address a p…
-
High 7.8
Syncplify.me Server! 5.0.37 Unquoted Service Path Privilege Escalation
Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the unquoted binary path. Attackers can insert a malicious executable into the servi…