CVE-2024-55927

Published Jan 23, 2025

Last updated 3 days ago

CVSS high 7.6

Overview

Description
A vulnerability in Xerox Workplace Suite arises from flawed token generation and the use of hard-coded keys. These weaknesses allow attackers to predict or forge tokens, leading to unauthorized access to sensitive functions.
Source
10b61619-3869-496c-8a1e-f291b0e71e3f
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.6
Impact score
4.7
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Severity
HIGH

Weaknesses

10b61619-3869-496c-8a1e-f291b0e71e3f
CWE-798

Social media

Hype score
Not currently trending

  1. New post from https://t.co/uXvPWJy6tj (CVE-2024-55927 | Xerox Workplace Suite prior 5.6.701.9 Token Generation hard-coded credentials) has been published on https://t.co/WG5lKLIxUb

    @WolfgangSesin

    23 Jan 2025

    14 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References