{"uuid": "190de23b-2081-4228-bb30-c12afc5f090d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36536", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/syncovery_linux_token_cve_2022_36536.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Jan Rude\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module attempts to brute-force a valid session token for the Syncovery File Sync & Backup Software Web-GUI\\n          by generating all possible tokens, for every second between 'DateTime.now' and the given X day(s).\\n          By default today and yesterday (DAYS = 1) will be checked. If a valid session token is found, the module stops.\\n          The vulnerability exists, because in Syncovery session tokens are basically just base64(m/d/Y H:M:S) at the time\\n          of the login instead of a random token.\\n          If a user does not log out (Syncovery v8.x has no logout) session tokens will remain valid until reboot.\", \"disclosure_date\": \"2022-09-06\", \"fullname\": \"auxiliary/scanner/http/syncovery_linux_token_cve_2022_36536\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:52:36 +0000\", \"name\": \"Syncovery For Linux Web-GUI Session Token Brute-Forcer\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/syncovery_linux_token_cve_2022_36536.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/syncovery_linux_token_cve_2022_36536\", \"references\": [\"URL-https://www.mgm-sp.com/en/multiple-vulnerabilities-in-syncovery-for-linux/\", \"CVE-2022-36536\"], \"rport\": 8999, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:52.711415Z"}