high7.5
CVE-2022-22828
An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modifie…
Impact
An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synametrics | Synaman | before 5.0 |