Skip to content
OpenAdvisories

Product · Faronics

WINSelect (Standard + Enterprise)

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-36496

    Hardcoded Credentials

    The configuration file is encrypted with a static key derived from a static five-character password which allows an attacker to decrypt this file. The application hashes this five-character password with the outdated and broken MD5 algorithm (no salt) and use…

    Faronics WINSelect (Standard + Enterprise)
  • High 7.7
    CVE-2024-36495

    Read/Write Permissions for Everyone on Configuration File

    The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file system which "Everyone" has read and write access to, path to file: C:\ProgramData\WINSelect\WINSelect.wsd The path for the affected WINSelect …

    Faronics WINSelect (Standard + Enterprise)