VULNERABILITY INTELLIGENCE

CVE-2024-36495

CVSS score7.7 HIGH
EPSS probability0.31%
CISA KEVNot currently listed
Published2024-06-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file system which "Everyone" has read and write access to, path to file: C:\ProgramData\WINSelect\WINSelect.wsd The path for the affected WINSelect Enterprise configuration file is: C:\ProgramData\Faronics\StorageSpace\WS\WINSelect.wsd

Weakness classification

  • 551230f0-3615-47bd-b7cc-93e92e730bbf: CWE-276

Primary references