This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2024-36495 | BDVDB-2026-240663 Detail

FaronicsWINSelect (Standard + Enterprise)

Description#

The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file system which "Everyone" has read and write access to, path to file: C:\ProgramData\WINSelect\WINSelect.wsd The path for the affected WINSelect Enterprise configuration file is: C:\ProgramData\Faronics\StorageSpace\WS\WINSelect.wsd

Impact#

CAPEC-75 Manipulating Writeable Configuration Files

Weaknesses#

  • CWE-276 Incorrect Default Permissions

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.