3 matches found
Design/Logic Flaw
An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...
5CVSS7.4AI score0.02073EPSS
SaveExploits1References2Affected Software1
CVE-2022-22828
An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...
7.6AI score0.02073EPSS
SaveExploits1References2
CVE-2022-22828: Authorization Bypass Through User-Controlled Key
An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string...
7.5CVSS7.3AI score0.02073EPSS
SaveExploits1References2
20