CVEvulnerability
CVE-2024-36497
9.1 CRITICAL
Official page ↗
- Status
- Deferred
- Published
- 2024-06-24
- Last modified
- 2026-06-17
- Assigner
- 551230f0-3615-47bd-b7cc-93e92e730bbf
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-312
Description
The decrypted configuration file contains the password in cleartext
which is used to configure WINSelect. It can be used to remove the
existing restrictions and disable WINSelect entirely.
Related
Weakness · CWE (1)
- CWE-312 Cleartext Storage of Sensitive Information weakness
References
- http://seclists.org/fulldisclosure/2024/Jun/12 seclists.org
- https://r.sec-consult.com/winselect r.sec-consult.com
- https://www.faronics.com/en-uk/document-library/document/winselect-standard-release-notes www.faronics.com
- http://seclists.org/fulldisclosure/2024/Jun/12 seclists.org
- https://r.sec-consult.com/winselect r.sec-consult.com
- https://www.faronics.com/en-uk/document-library/document/winselect-standard-release-notes www.faronics.com