We have been alerted to a protentional threat on our Winshuttle Server, do you foresee any problems upgrading the Microsoft Sync Framework from 1 to 2.1?
Threat: Microsoft Sync Framework is a comprehensive synchronization platform that enables collaboration and offline scenarios for applications, services, and devices.
Technical support for the Microsoft Sync Framework ended on 01-08-19.
NOTE: Our detection logic cannot distinguish software installed standalone vs installed as part of another software as dependency. So this QID is a practice check.
QID Detection Logic (Authenticated):
It checks for vulnerable version of Microsoft.Synchronization.dll file. Impact: The system is at high risk of being exposed to security vulnerabilities. Since the vendor no longer provides updates, obsolete software is more prone to vulnerabilities.
Solution: Users are advised to obtain the Microsoft Sync Framework 2.1.
Microsoft Sync Framework doesn't have any impact on Winshuttle ; so if you upgrade Microsoft Sync Framework 2.1. It wouldn't impact Foundation or Studio.