PT-2023-2974 · Faronics · Faronics Insight

Published 2023-02-01 · Updated 2025-01-13 · CVE-2023-28351

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Faronics Insight version 10.0.19045

Description An issue in Faronics Insight allows every keystroke made by any user on a computer with the Student application installed to be logged to a world-readable directory. This enables a local attacker to extract these cleartext keystrokes, potentially obtaining personally identifiable information (PII) and/or compromising personal accounts owned by the victim. The vulnerability is related to the unencrypted storage of confidential information in keystroke logs.

Recommendations For Faronics Insight version 10.0.19045, consider restricting access to the directory where keystrokes are logged to minimize the risk of exploitation. As a temporary workaround, limit the use of the Student application until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Storage of Sensitive Information

Insertion into Log File

Weakness Enumeration

CWE-312

CWE-532

Related Identifiers

BDU:2023-02989

CVE-2023-28351

Affected Products

Faronics Insight

References · 5

• 🔥 https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-28351 · Security Note
• https://osv.dev/vulnerability/CVE-2023-28351 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02989 · Security Note
• https://research.nccgroup.com/?research=Technical%20advisories · Note