CVE-2022-36536

2022-09-1603:15:09

CWE-330

[email protected]

web.nvd.nist.gov

component

super flexible software gmbh & co. kg

syncovery 9

linux

privilege escalation

session tokens

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.037

Percentile

91.8%

JSON

An issue in the component post_applogin.php of Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below allows attackers to escalate privileges via creating crafted session tokens.

Affected configurations

Nvd

Node

syncoverysyncoveryRange8.00–9.48j

AND

linuxlinux_kernelMatch-

VendorProductVersionCPE
syncoverysyncovery*cpe:2.3:a:syncovery:syncovery:*:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*