Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Druva Component: Insync Clear all filters
TI-2019-03005 CVE-2019-4001 · GHSA-vww8-2r48-h78w

Improper input validation in Druva inSync Client

Priority LOW 35

Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00566 Published 2020-03-24 No fix listed CWE-20
TI-2019-03004 CVE-2019-4000 · GHSA-pwwh-9mwx-42h3

Code injection in Druva inSync Mac OS Client

Priority LOW 35

Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, authenticated attacker to execute arbitrary Python expressions with root privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00733 Published 2020-02-25 No fix listed CWE-94