CVE-2023-28345: Medium severity faronics insight vulnerability
An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application exposes the teacher's Console password in cleartext via an API endpoint accessible from localhost. Attackers with physical access to the Teacher Console can open a web browser, navigate to the affected endpoint and obtain the teacher's password. This enables them to log into the Teacher Console and begin trivially attacking student machines.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28345?
CVE-2023-28345 is considered a medium severity vulnerability due to the exposure of sensitive information.
How do I fix CVE-2023-28345?
To fix CVE-2023-28345, update Faronics Insight to a version that addresses this vulnerability.
Who is affected by CVE-2023-28345?
CVE-2023-28345 affects users of Faronics Insight version 10.0.19045 installed on Windows.
What does CVE-2023-28345 expose?
CVE-2023-28345 exposes the teacher's Console password in cleartext via an API endpoint accessible from localhost.
Can physical access lead to exploitation of CVE-2023-28345?
Yes, physical access to the Teacher Console allows an attacker to exploit CVE-2023-28345.