[0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5)
Authenticated Syncrify 6.2 path traversal can write cron jobs and execute commands as root.
0day Rubbish Research Team disclosed an authenticated vulnerability in Synametrics Syncrify 6.2 build 1178, a closed-source Java backup and file-replication server. A PublicLink chunk-upload path traversal can reach /etc/cron.d and result in root command execution. The Linux distribution is served by embedded Tomcat 9.0.113 through the vendor sradef framework. The post does not report observed exploitation.
- Syncrify 6.2 build 1178 has an authenticated PublicLink chunk-upload path traversal.
- Traversal can write to /etc/cron.d and lead to root command execution.
- The Java product uses embedded Tomcat 9.0.113 and the sradef front controller.
- Disclosure is public; the excerpt does not report in-the-wild exploitation.
- Vendors
- Synametrics Technologies
- Countries
- United States
From the original article
Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability in Synametrics Syncrify 6. 2 build 1178, the closed-source incremental backup and file-replication server from Synametrics Technologies, Inc. (United States).
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.