CVE-2024-36496

The configuration file is encrypted with a static key derived from a static five-character password which allows an attacker to decrypt this file. The application hashes this five-character password with the outdated and broken MD5 algorithm no salt and uses the first five bytes as the key for RC...

CVE-2024-36496

CVE-2024-36496 affects Faronics WINSelect (Standard + Enterprise) with vulnerable configurations prior to 8.30.xx.903. The issue arises from encrypting the configuration file using a static key derived from a static five-character password. That password is hashed with MD5 (no salt), and the firs...

Faronics WINSelect Trust Management Issues Vulnerability

Faronics WINSelect is an application from Faronics, Inc. It is used to customize the usage configuration of Windows computers. A security vulnerability previously existed in Faronics WINSelect version 8.30.xx.903, which arose from the use of configuration files encrypted with a static key derived...