Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2024-36495

Read/Write Permissions for Everyone on Configuration File

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SEC-VLab

Description

The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file system which "Everyone" has read and write access to, path to file: C:\ProgramData\WINSelect\WINSelect.wsd The path for the affected WINSelect Enterprise configuration file is: C:\ProgramData\Faronics\StorageSpace\WS\WINSelect.wsd

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Faronics WINSelect (Standard + Enterprise)

Default version status: affected

  • 8.30.xx.903unaffected

References