CVE-2024-36495 – The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an …

Vuln ID: CVE-2024-36495

Published:  2024-06-24  09:15:09.730

Description: The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file system which “Everyone” has read and write access to, path to file:

C:ProgramDataWINSelectWINSelect.wsd

The path for the affected WINSelect Enterprise configuration file is:

C:ProgramDataFaronicsStorageSpaceWSWINSelect.wsd

Base Score:

Vector:

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):