CVE:CVE-2015-3140
CNNVD:CNNVD-201506-508
Synametrics Technologies SynaMan等都是美国Synametrics Technologies公司的产品。Synametrics Technologies SynaMan是一款远程文件管理器。Synametrics Technologies Syncrify是一套私有云备份软件。Synametrics Technologies SynTail是一套基于Web的tail实用程序。
Synametrics Technologies SynaMan 3.5 Build 1451之前版本、Syncrify 3.7 Build 856之前版本和SynTail 1.5 Build 567之前版本中存在跨站请求伪造漏洞。该漏洞源于WEB应用未充分验证请求是否来自可信用户。攻击者可利用该漏洞通过受影响客户端向服务器发送非预期的请求。
solution:Upgrade synametrics synaman to a higher version than 1.0:build786,1.0:build805,1.1:build972,2.0:build1185,2.1:build1202,2.2:build1205,2.2:build1246,2.3:build1259,2.3:build1261,2.4:build1272,2.5:build1282,2.5:build1289,2.5:build1291,2.5:build1302,2.5:build1303,2.5:build1304,2.5:build1310,2.5:build1313,2.5:build1314,2.5:build1316,2.5:build1318,2.5:build1321,2.5:build1322,2.5:build1324,2.5:build1325,2.6:build1328,2.7:build1337,2.7:build1341,2.7:build1342,3.0:build1358,3.0:build1363,3.0:build1365,3.1:build1380,3.1:build1382,3.1:build1384,3.1:build1386,3.2:build1393,3.2:build1394,3.2:build1398,3.3:build1418,3.3:build1425,3.3:build1430,3.4:build1434,3.4:build1444,and avoid the version 1.0:build786,1.0:build805,1.1:build972,2.0:build1185,2.1:build1202,2.2:build1205,2.2:build1246,2.3:build1259,2.3:build1261,2.4:build1272,2.5:build1282,2.5:build1289,2.5:build1291,2.5:build1302,2.5:build1303,2.5:build1304,2.5:build1310,2.5:build1313,2.5:build1314,2.5:build1316,2.5:build1318,2.5:build1321,2.5:build1322,2.5:build1324,2.5:build1325,2.6:build1328,2.7:build1337,2.7:build1341,2.7:build1342,3.0:build1358,3.0:build1363,3.0:build1365,3.1:build1380,3.1:build1382,3.1:build1384,3.1:build1386,3.2:build1393,3.2:build1394,3.2:build1398,3.3:build1418,3.3:build1425,3.3:build1430,3.4:build1434,3.4:build1444; Upgrade synametrics syncrify to a higher version than 1.3:build352,1.3:build369,1.3:build372,1.3:build375,1.4:build379,1.4:build393,2.0:build413,2.0:build415,2.1:build420,2.1:build422,2.2:build429,2.2:build432,2.3:build443,2.3:build444,2.4:build459,2.4:build463,2.5:build473,2.6:build510,2.6:build517,2.6:build522,3.0:build580,3.0:build591,3.0:build596,3.1:build614,3.2:build629,3.2:build630,3.2:build633,3.2:build638,3.2:build649,3.3:build682,3.3:build688,3.3:build693,3.3:build696,3.3:build700,3.3:build704,3.4:build725,3.4:build735,3.4:build741,3.4:build749,3.5:build778,3.5:build781,3.6:build800,3.6:build809,3.6:build812,3.6:build813,3.6:build814,3.6:build823,3.6:build828,3.7:build833,3.7:build834,3.7:build844,3.7:build850,and avoid the version 1.3:build352,1.3:build369,1.3:build372,1.3:build375,1.4:build379,1.4:build393,2.0:build413,2.0:build415,2.1:build420,2.1:build422,2.2:build429,2.2:build432,2.3:build443,2.3:build444,2.4:build459,2.4:build463,2.5:build473,2.6:build510,2.6:build517,2.6:build522,3.0:build580,3.0:build591,3.0:build596,3.1:build614,3.2:build629,3.2:build630,3.2:build633,3.2:build638,3.2:build649,3.3:build682,3.3:build688,3.3:build693,3.3:build696,3.3:build700,3.3:build704,3.4:build725,3.4:build735,3.4:build741,3.4:build749,3.5:build778,3.5:build781,3.6:build800,3.6:build809,3.6:build812,3.6:build813,3.6:build814,3.6:build823,3.6:build828,3.7:build833,3.7:build834,3.7:build844,3.7:build850; Upgrade synametrics syntail to a higher version than 1.0:build420,1.1:build429,1.2:build445,1.5:build561,and avoid the version 1.0:build420,1.1:build429,1.2:build445,1.5:build561