Flexense Sync Breeze Enterprise Server and Disk Pulse Enterprise Remote Denial-of-Service Vulnerability

A remote denial-of-service vulnerability has been identified in Sync Breeze Enterprise Server and Disk Pulse Enterprise, both version 10.4.18. The issue arises in the configuration restore functionality, where insufficient validation of user-supplied data allows an attacker to send malicious requests that alter the configuration file. This manipulation can cause the application to become unresponsive, and in some cases, the service may not recover without a complete reinstallation, as the corrupted configuration prevents the service from restarting manually.

Impact

Exploitation of this vulnerability leads to a remote denial-of-service condition, causing the application to become unresponsive. The service may require a complete reinstallation to restore functionality, as the configuration file becomes corrupted and prevents manual restarts.