Medium severity4.6NVD Advisory· Published May 31, 2023· Updated Jun 17, 2026
CVE-2023-28345
CVE-2023-28345
Description
An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application exposes the teacher's Console password in cleartext via an API endpoint accessible from localhost. Attackers with physical access to the Teacher Console can open a web browser, navigate to the affected endpoint and obtain the teacher's password. This enables them to log into the Teacher Console and begin trivially attacking student machines.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Faronics/Insight Teacher Consoledescription
- Range: 10.0.19045
Patches
Vulnerability mechanics
References
2- research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/nvdExploitMitigationRelease NotesThird Party Advisory
- research.nccgroup.comnvdThird Party Advisory
News mentions
0No linked articles in our index yet.