Lucene search

K
nvd[email protected]NVD:CVE-2023-28344
HistoryMay 31, 2023 - 12:15 a.m.

CVE-2023-28344

2023-05-3100:15:09
CWE-668
web.nvd.nist.gov
2
cve-2023-28344
faronics insight
windows
unauthenticated access
screenshots
personal data
falsified images

CVSS3

7.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

32.6%

An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unauthenticated attackers to view constantly updated screenshots of student desktops and to submit falsified screenshots on behalf of students. Attackers are able to view screenshots of student desktops without their consent. These screenshots may potentially contain sensitive/personal data. Attackers can also rapidly submit falsified images, hiding the actual contents of student desktops from the Teacher Console.

Affected configurations

Nvd
Node
microsoftwindowsMatch-
AND
faronicsinsightMatch10.0.19045
VendorProductVersionCPE
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
faronicsinsight10.0.19045cpe:2.3:a:faronics:insight:10.0.19045:*:*:*:*:*:*:*

CVSS3

7.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

32.6%

Related for NVD:CVE-2023-28344