CVE-2024-36495

2024-06-2409:15:09

CWE-276

551230f0-3615-47bd-b7cc-93e92e730bbf

web.nvd.nist.gov

faronics winselect

encrypted file

insecure permissions

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file system which “Everyone” has read and write access to, path to file:

C:\ProgramData\WINSelect\WINSelect.wsd

The path for the affected WINSelect Enterprise configuration file is:

C:\ProgramData\Faronics\StorageSpace\WS\WINSelect.wsd

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "WINSelect (Standard + Enterprise)",
    "vendor": "Faronics",
    "versions": [
      {
        "status": "unaffected",
        "version": "8.30.xx.903",
        "versionType": "custom"
      }
    ]
  }
]