PT-2023-2945 · Faronics · Faronics Insight

Published 2023-02-01 · Updated 2025-01-14 · CVE-2023-28345

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Faronics Insight versions 10.0.19045

Description The issue is related to the insecure storage of credentials in the Teacher Console component of the Faronics Insight platform. This allows an attacker with physical access to the Teacher Console to obtain the teacher's password in cleartext by accessing a specific API endpoint from localhost. Once the password is obtained, the attacker can log into the Teacher Console and potentially attack student machines.

Recommendations For Faronics Insight version 10.0.19045, consider restricting access to the API endpoint that exposes the teacher's Console password in cleartext to minimize the risk of exploitation. As a temporary workaround, limit physical access to the Teacher Console to prevent unauthorized individuals from navigating to the affected endpoint and obtaining the teacher's password. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

BDU:2023-02950

CVE-2023-28345

Affected Products

Faronics Insight

References · 6

• 🔥 https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight · Exploit
• https://osv.dev/vulnerability/CVE-2023-28345 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02950 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-28345 · Security Note
• https://t.me/cvenotify/107299 · Telegram Post
• https://research.nccgroup.com/?research=Technical%20advisories · Note