Data Exposure Vulnerability in Xerox WorkCentre Products
CVE-2006-6438

Currently unrated

Key Information:

Vendor
Xerox
Status
Workcentre 255
Workcentre 245
Workcentre 238
Workcentre 232
Vendor
CVE Published:
10 December 2006

Summary

An identified weakness in Xerox WorkCentre and WorkCentre Pro devices allows sensitive user information to be retained in the http.log file post Immediate Image Overwrite (IIO). This flaw permits local users access to potentially confidential data, which poses significant privacy risks. Versions prior to 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 are susceptible, compromising user trust in the handling of secure documents.

References

http://secunia.com/advisories/23265
third-party-advisoryx_refsource_SECUNIA
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v1...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.