PT-2019-7177 · Synametrics Technologies · Syntail+2

Publicado 2019-11-21 · Atualizado 2019-12-04 · CVE-2015-3140

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Synametrics Technologies SynaMan versions prior to 3.5 Build 1451 Synametrics Technologies Syncrify versions prior to 3.7 Build 856 Synametrics Technologies SynTail versions prior to 1.5 Build 567

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. CSRF is a type of attack where an attacker tricks a user into performing unintended actions on a web application that the user is authenticated to. This can lead to unauthorized actions being taken on behalf of the user.

Recommendations For Synametrics Technologies SynaMan versions prior to 3.5 Build 1451, update to version 3.5 Build 1451 or later. For Synametrics Technologies Syncrify versions prior to 3.7 Build 856, update to version 3.7 Build 856 or later. For Synametrics Technologies SynTail versions prior to 1.5 Build 567, update to version 1.5 Build 567 or later.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2015-3140

Produtos afetados

Syntail

Synaman

Syncrify

Referências · 8

• 🔥 https://exploit-db.com/exploits/36951 · Exploit
• 🔥 https://exploit-db.com/exploits/36950 · Exploit
• 🔥 https://exploit-db.com/exploits/36953 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-3140 · Nota de Segurança
• https://web.synametrics.com/SyncrifyVersionHistory.htm · Aviso do Fabricante
• https://web.synametrics.com/SyntailVersionHistory.htm · Aviso do Fabricante
• http://web.synametrics.com/SynamanVersionHistory.htm · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3140 · Nota