CVE-2023-28346

An issue was discovered in Faronics Insight 10.0.19045 on Windows

High · published May 30, 2023

CVSS v3.1
7.3
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for a remote attacker to communicate with the private API endpoints exposed at /login, /consoleSettings, /console, etc. despite Virtual Host Routing being used to block this access. Remote attackers can interact with private pages on the web server, enabling them to perform privileged actions such as logging into the console and changing console settings if they have valid credentials.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00884 · 58.8th percentile
Published
2023-05-30T00:00Z
EPSS history
Timeline
  • 30 MAY 00:00Z
    An issue was discovered in Faronics Insight 10.0.19045 on Windows
    cvelistv5