CVE-2015-3140

CVSS V2 Medium 6.8 CVSS V3 High 8.8
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567
Overview
  • CVE ID
  • CVE-2015-3140
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2019-11-21T22:15:15
  • Last Modified Date
  • 2019-12-04T19:55:59
Weakness Enumerations
CWE URL
CWE-352 http://cwe.mitre.org/data/definitions/352.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:synametrics:synaman:1.0:build786:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:1.0:build805:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:1.1:build972:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.0:build1185:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.1:build1202:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.2:build1205:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.2:build1246:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.3:build1259:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.3:build1261:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.4:build1272:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1282:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1289:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1291:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1302:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1303:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1304:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1310:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1313:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1314:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1316:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1318:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1321:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1322:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1324:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.5:build1325:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.6:build1328:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.7:build1337:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.7:build1341:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:2.7:build1342:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.0:build1358:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.0:build1363:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.0:build1365:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.1:build1380:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.1:build1382:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.1:build1384:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.1:build1386:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.2:build1393:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.2:build1394:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.2:build1398:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.3:build1418:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.3:build1425:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.3:build1430:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.4:build1434:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:synaman:3.4:build1444:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:1.3:build352:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:1.3:build369:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:1.3:build372:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:1.3:build375:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:1.4:build379:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:1.4:build393:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.0:build413:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.0:build415:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.1:build420:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.1:build422:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.2:build429:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.2:build432:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.3:build443:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.3:build444:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.4:build459:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.4:build463:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.5:build473:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.6:build510:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.6:build517:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:2.6:build522:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.0:build580:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.0:build591:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.0:build596:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.1:build614:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.2:build629:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.2:build630:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.2:build633:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.2:build638:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.2:build649:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.3:build682:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.3:build688:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.3:build693:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.3:build696:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.3:build700:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.3:build704:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.4:build725:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.4:build735:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.4:build741:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.4:build749:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.5:build778:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.5:build781:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.6:build800:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.6:build809:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.6:build812:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.6:build813:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.6:build814:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.6:build823:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.6:build828:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.7:build833:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.7:build834:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.7:build844:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syncrify:3.7:build850:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syntail:1.0:build420:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syntail:1.1:build429:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syntail:1.2:build445:*:*:*:*:*:* 1 OR
cpe:2.3:a:synametrics:syntail:1.5:build561:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:P/I:P/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 6.8
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 6.4
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • LOW
  • Privileges Required
  • NONE
  • User Interaction
  • REQUIRED
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • HIGH
  • Availability Impact
  • HIGH
  • Base Score
  • 8.8
  • Base Severity
  • HIGH
  • Exploitability Score
  • 2.8
  • Impact Score
  • 5.9
References
Reference URL Reference Tags
http://web.synametrics.com/SynamanVersionHistory.htm Mitigation Release Notes Vendor Advisory
https://web.synametrics.com/SyntailVersionHistory.htm Mitigation Release Notes Vendor Advisory
https://web.synametrics.com/SyncrifyVersionHistory.htm Mitigation Release Notes Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2015-3140
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3140
History
Created Old Value New Value Data Type Notes
2022-05-10 16:58:20 Added to TrackCVE
2022-12-04 06:45:01 2019-11-21T22:15Z 2019-11-21T22:15:15 CVE Published Date updated
2022-12-04 06:45:01 2019-12-04T19:55:59 CVE Modified Date updated
2022-12-04 06:45:01 Analyzed Vulnerability Status updated