← Database

CVE-2022-22828

HIGH CVSS: 7.5 Published: 2022-01-27 Modified: 2026-06-17

Description

An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string.

Affected Platforms

Synametrics Synaman

Weakness Type

CWE-639

References