CVE-2024-55928

概要

参考情報

• securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf · Vendor Advisory

workplace suite のその他の脆弱性

• CVE-2024-55931中 6.5Xerox Workplace Suite stores tokens in session storage, which may expose them to potential access if a user's session is compromised.  The …
• CVE-2024-55930緊急 9.8Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files
• CVE-2024-55929中 5.3A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, making it appear as though messages are sent…
• CVE-2024-55927高 7.5A vulnerability in Xerox Workplace Suite arises from flawed token generation and the use of hard-coded keys. These weaknesses allow attacker…
• CVE-2024-55926緊急 9.8A vulnerability found in Xerox Workplace Suite allows arbitrary file read, upload, and deletion on the server through crafted header manipul…