Skip to content
OpenAdvisories
Critical · 9.1 CVE-2024-36497 EUVD-2024-36126GHSA-7p6q-hqg2-6cpg

Unhashed Storage of Password

Published Jun 24, 2024 · Updated Feb 13, 2025 · Assigned by SEC-VLab

Description

The decrypted configuration file contains the password in cleartext
which is used to configure WINSelect. It can be used to remove the
existing restrictions and disable WINSelect entirely.

Affected products

VendorProductAffectedFixed
Faronics WINSelect (Standard + Enterprise) — 8.30.xx.903

References