Fujifilm Synapse Mobility Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Fujifilm Synapse Mobility versions 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1. This vulnerability allows authenticated users to manipulate search function parameters, potentially accessing data beyond their authorized permissions. The issue arises from external control of web parameters, disrupting role-based access controls.

Impact

Exploitation of this vulnerability could lead to unauthorized access to restricted data by escalating user privileges through the search function.

Remediation

Users are advised to update Synapse Mobility to version 9.0 or 8.2x, both of which are not affected by this vulnerability. Patches are also available for Synapse Mobility versions 8.0 to 8.1.1.