Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2024-36497

Unhashed Storage of Password

Description

The decrypted configuration file contains the password in cleartext which is used to configure WINSelect. It can be used to remove the existing restrictions and disable WINSelect entirely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Faronics WINSelect (Standard + Enterprise)

Default version status: affected

  • 8.30.xx.903unaffected

References