Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for a remote attacker to communicate with the private API endpoints exposed at /login, /consoleSettings, /console, etc. despite Virtual Host Routing being used to block this access. Remote attackers can interact with private pages on the web server, enabling them to perform privileged actions such as logging into the console and changing console settings if they have valid credentials.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Faronics Insight 安全漏洞
Vulnerability Description
Faronics Insight是加拿大Faronics公司的一个有效的课堂管理工具。 Faronics Insight 10.0.19045 版本存在安全漏洞,该漏洞源于/login、/consoleSettings、/console等私有接口可以被访问并执行特权操作。
CVSS Information
N/A
Vulnerability Type
N/A