Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 8.8.0
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Syncplify Server!, an SFTP/file transfer server, is affected by a flaw that lets logged-in users bypass folder-specific permission restrictions by referring to a protected directory with different letter casing or its Windows 8.3 short name. The result is that users can upload and download files they should be blocked from accessing.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to evade per-path permission overrides by exploiting case-insensitive filesystem path resolution and 8.3 short names. Attackers can address a protected directory using alternate capitalization or its 8.3 short name to perform file uploads and downloads that the configured override is intended to deny, resulting in unauthorized file access.
Timeline
- CVE published
- First seen by cve.now
- Record last updated
Affected versions
- Syncplify, Inc. Syncplify Server!
fixed in 8.8.0