Syncplify Server
Monthly
Filesystem jail escape in Syncplify Server! before 8.8.0 lets an authenticated low-privileged user read restricted files outside the virtual filesystem root by placing a symbolic link or, on Windows, a directory junction in their home folder. It requires a valid account, the ability to create such links, and knowledge or discovery of a reachable sensitive target outside the jail. No public exploit was identified at time of analysis; the vendor patch is 8.8.0 and the issue is prioritized for this week.
Access control bypass in Syncplify Server! before 8.8.0 allows authenticated SFTP users to evade per-path permission overrides by addressing a protected directory with alternate capitalization or its 8.3 short name, enabling file uploads and downloads the override is meant to deny. The flaw is conditional on an existing deny override and on filesystem behavior that accepts alternate case or short names, such as Windows/NTFS; on strictly case-sensitive filesystems without short-name generation the technique is limited. No public exploit was identified at time of analysis, and the vendor has released 8.8.0 as the fix.
Filesystem jail escape in Syncplify Server! before 8.8.0 lets an authenticated low-privileged user read restricted files outside the virtual filesystem root by placing a symbolic link or, on Windows, a directory junction in their home folder. It requires a valid account, the ability to create such links, and knowledge or discovery of a reachable sensitive target outside the jail. No public exploit was identified at time of analysis; the vendor patch is 8.8.0 and the issue is prioritized for this week.
Access control bypass in Syncplify Server! before 8.8.0 allows authenticated SFTP users to evade per-path permission overrides by addressing a protected directory with alternate capitalization or its 8.3 short name, enabling file uploads and downloads the override is meant to deny. The flaw is conditional on an existing deny override and on filesystem behavior that accepts alternate case or short names, such as Windows/NTFS; on strictly case-sensitive filesystems without short-name generation the technique is limited. No public exploit was identified at time of analysis, and the vendor has released 8.8.0 as the fix.