Lucene search
551230f0-3615-47bd-b7cc-93e92e730bbfNVD:CVE-2024-36495HistoryJun 24, 2024 - 9:15 a.m.
CVE-2024-36495
2024-06-2409:15:09
CWE-276
551230f0-3615-47bd-b7cc-93e92e730bbf
web.nvd.nist.gov
3
faronics winselect
configuration file
encrypted
file permissions
0.0004 Low
EPSS
Percentile
15.8%
The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file system which “Everyone” has read and write access to, path to file:
C:\ProgramData\WINSelect\WINSelect.wsd
The path for the affected WINSelect Enterprise configuration file is:
C:\ProgramData\Faronics\StorageSpace\WS\WINSelect.wsd
Related
cve
cve
CVE-2024-36495
2024-06-24 09:15:09
cvelist
cvelist
CVE-2024-36495 Read/Write Permissions for Everyone on Configuration File
2024-06-24 08:50:07
packetstorm
packetstorm