API Security Bypass in Xerox Workplace Suite
CVE-2024-55925

6.5MEDIUM

Key Information:

Vendor
Xerox
Status
Xerox Workplace Suite
Vendor
CVE Published:
23 January 2025

Summary

The vulnerability results from improper handling of API requests, allowing unauthorized users to manipulate headers and bypass security mechanisms. This can lead to exposure of sensitive data or unauthorized access to protected resources within the Xerox Workplace Suite. Users are advised to review the security bulletin and implement recommended measures to mitigate the risk.

Affected Version(s)

Xerox Workplace Suite Windows 0 < 5.6.701.9

References

https://securitydocs.business.xerox.com/wp-content/upload...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.