PT-2022-1359 · Unknown · File Sync Client

Published 2022-06-01 · Updated 2025-01-18 · CVE-2022-20128

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions file sync client (affected versions not specified)

Description The issue is related to a path traversal error in the finishLsImpl function of file sync client.cpp. This error could allow access to the host's files, potentially leading to local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

ASB-A-209438553

CVE-2022-20128

Affected Products

File Sync Client

References · 12

• 🔥 https://github.com/irsl/CVE-2022-20128 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-20128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-20128 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-20128 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-20128 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-20128 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-20128 · Security Note
• https://osv.dev/vulnerability/ASB-A-209438553 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/6778 · Telegram Post
• https://source.android.com/security/bulletin/2022-06-01 · Note
• https://t.me/cvedetector/15752 · Telegram Post
• https://openwall.com/lists/oss-security/2022/10/25/5 · Note