CVE-2023-28344: Path Traversal
An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unauthenticated attackers to view constantly updated screenshots of student desktops and to submit falsified screenshots on behalf of students. Attackers are able to view screenshots of student desktops without their consent. These screenshots may potentially contain sensitive/personal data. Attackers can also rapidly submit falsified images, hiding the actual contents of student desktops from the Teacher Console.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28344?
CVE-2023-28344 has been classified as a critical vulnerability due to its ability to allow unauthenticated access to sensitive information.
How do I fix CVE-2023-28344?
To mitigate CVE-2023-28344, update Faronics Insight to version 10.0.19046 or higher, where the vulnerability has been addressed.
What systems are affected by CVE-2023-28344?
CVE-2023-28344 affects Faronics Insight version 10.0.19045 running on Microsoft Windows.
What kind of attack can exploit CVE-2023-28344?
CVE-2023-28344 can be exploited by unauthenticated attackers to view and submit falsified screenshots on the Insight Teacher Console.
Can CVE-2023-28344 lead to data breaches?
Yes, CVE-2023-28344 poses a risk of data breaches by allowing access to real-time screenshots of student desktops.