Vulnerabilities > CVE-2021-36665 - Deserialization of Untrusted Data vulnerability in Druva Insync Client

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

local

low complexity

NVD

Published: 2022-07-12

Updated: 2022-07-20

Summary

An issue was discovered in Druva 6.9.0 for macOS, allows attackers to gain escalated local privileges via the inSyncUpgradeDaemon.

Part	Description	Count
Application	Druva Druva Insync Client * Druva Insync Client 6.0.1 Druva Insync Client 6.1.0 Druva Insync Client 6.1.1 Druva Insync Client 6.2.0 Druva Insync Client 6.5.0 Druva Insync Client 6.5.1 Druva Insync Client 6.5.2 Druva Insync Client 6.6.0 Druva Insync Client 6.6.1 Druva Insync Client 6.6.2 Druva Insync Client 6.6.3 Druva Insync Client 6.6.4	13