Description
Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pyrus | Pyrus Sync | < 1.8.745.0 | 1.8.745.0 |