CVE-2023-28345

An issue was discovered in Faronics Insight 10.0.19045 on Windows

Medium · published May 30, 2023

CVSS v3.1
4.6
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application exposes the teacher's Console password in cleartext via an API endpoint accessible from localhost. Attackers with physical access to the Teacher Console can open a web browser, navigate to the affected endpoint and obtain the teacher's password. This enables them to log into the Teacher Console and begin trivially attacking student machines.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00319 · 23.6th percentile
Published
2023-05-30T00:00Z
EPSS history
Timeline
  • 30 MAY 00:00Z
    An issue was discovered in Faronics Insight 10.0.19045 on Windows
    cvelistv5