Description

We have been alerted to a protentional threat on our Winshuttle Server, do you foresee any problems upgrading the Microsoft Sync Framework from 1 to 2.1?

Threat: Microsoft Sync Framework is a comprehensive synchronization platform that enables collaboration and offline scenarios for applications, services, and devices.
Technical support for the Microsoft Sync Framework ended on 01-08-19.

NOTE: Our detection logic cannot distinguish software installed standalone vs installed as part of another software as dependency. So this QID is a practice check.

QID Detection Logic (Authenticated):
It checks for vulnerable version of Microsoft.Synchronization.dll file. Impact: The system is at high risk of being exposed to security vulnerabilities. Since the vendor no longer provides updates, obsolete software is more prone to vulnerabilities.

Solution: Users are advised to obtain the Microsoft Sync Framework 2.1.

Applies To

12x

Solution/Immediate Workaround

Microsoft Sync Framework doesn't have any impact on Winshuttle ; so if you upgrade Microsoft Sync Framework 2.1. It wouldn't impact Foundation or Studio.