CVE-2015-3140: 
Synametrics SynaMan vulnerability analysis and mitigation

Multiple cross-site request forgery (CSRF) vulnerabilities were discovered in Synametrics Technologies products including SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567 (Synaman History, Syncrify History, Syntail History). The vulnerability was disclosed and patched in April 2015.

The vulnerability was identified as a cross-site request forgery (CSRF) issue that could allow attackers to perform unauthorized actions in the context of authenticated users. The CVSS v3.1 base score is 8.8 HIGH with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a high severity vulnerability requiring user interaction (NVD).

The CSRF vulnerability could allow attackers to perform unauthorized actions on behalf of authenticated users, potentially leading to high impacts on confidentiality, integrity, and availability of the affected systems (NVD).

The vulnerability requires user interaction and network access to exploit. No public exploits were identified in the analyzed sources.

The vulnerability was patched in SynaMan version 3.5 Build 1451, Syncrify version 3.7 Build 856, and SynTail version 1.5 Build 567. Users should upgrade to these or later versions to mitigate the vulnerability (Synaman History, Syncrify History, Syntail History).