CVE-2022-22828: 
Synametrics SynaMan vulnerability analysis and mitigation

An insecure direct object reference (IDOR) vulnerability was discovered in Synametrics SynaMan before version 5.0. The vulnerability allows remote attackers to access unshared files via a modified base64-encoded filename string in the file-download URL (NVD, GitHub POC).

The vulnerability exists in the file download functionality where the application uses a base64-encoded filename parameter in the URL. An attacker can modify this base64-encoded string to access files from a user's folder that have not been explicitly shared. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating network accessibility, low attack complexity, and no required privileges or user interaction (NVD).

The vulnerability allows unauthorized access to potentially sensitive files in a SynaMan user's home folder and subfolders that have not been authorized for sharing. This could lead to exposure of confidential information stored in the user's directories (GitHub POC).

The vulnerability can be exploited by modifying the base64-encoded filename in download URLs. Tools like Burp Suite can be used to automate the process of discovering and accessing unshared files. The attack requires the attacker to correctly guess filenames, though this can be automated through brute-force attempts (GitHub POC).

The vulnerability has been patched in SynaMan version 5.0. Users are advised to upgrade to this version or later to address the security issue. The fix prevents unauthorized access through modified base64-encoded filenames in download URLs (Synametrics).