EUVD-2019-13608

Malware in sbrugna...

EUVD-2020-26955

Malware in sbrugna...

CVE-2020-5798

inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user from a lower privileged user due to improper integrity checks and directory permissions...

CVE-2019-4001

Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code...

CVE-2020-5798

inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user from a lower privileged user due to improper integrity checks and directory permissions...

PT-2020-18719

Name of the Vulnerable Software and Affected Versions inSync Client installer for macOS versions v6.8.0 and prior Description The issue allows an attacker to gain privileges of a root user from a lower privileged user due to improper integrity checks and directory permissions. Recommendations For...

CVE-2020-5798: Incorrect Default Permissions

inSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain privileges of a root user from a lower privileged user due to improper integrity checks and directory permissions...

Druva inSync Client Security Vulnerability

Druva inSync Client is a lightweight application from Druva USA that supports managing data backups and allows collaboration with other users. A security vulnerability exists in the inSync Client installer, which stems from incorrect integrity checking and directory permissions, and which the...

Druva inSync Client Installed (Windows)

Binary data druvainsyncclientwininstalled.nbin...

Input validation

Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code...

CVE-2019-4001

Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code...

CVE-2019-4001

CVE-2019-4001 affects Druva inSync Client 6.5.0. The issue is an improper input validation vulnerability that allows a local, authenticated attacker to execute arbitrary NodeJS code. Root cause and detailed exploit steps are not provided in the connected documents. The CVSS metrics indicate a loc...

CVE-2019-4001: Improper Input Validation

Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code...

PT-2020-10930

Name of the Vulnerable Software and Affected Versions Druva inSync Client version 6.5.0 Description The issue is related to improper input validation, allowing a local, authenticated attacker to execute arbitrary NodeJS code. Recommendations For Druva inSync Client version 6.5.0, update to a...