CVE-2022-36536 in Syncovery 9

Sumário

de MITRE • 16/09/2022

An issue in the component post_applogin.php of Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below allows attackers to escalate privileges via creating crafted session tokens.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 25/07/2022
• Divulgação: 16/09/2022
• Moderação: aceite
• Entrada: VDB-208723
• CPE: pronto
• CWE: CWE-284 (confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.03958
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-36536
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-36536
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-36536/