API Security Bypass in Xerox Workplace Suite
CVE-2024-55925

7.5HIGH

Key Information:

Vendor

Xerox
Status
Xerox Workplace Suite
Vendor
CVE Published:
23 January 2025

What is CVE-2024-55925?

The vulnerability results from improper handling of API requests, allowing unauthorized users to manipulate headers and bypass security mechanisms. This can lead to exposure of sensitive data or unauthorized access to protected resources within the Xerox Workplace Suite. Users are advised to review the security bulletin and implement recommended measures to mitigate the risk.

Affected Version(s)

Xerox Workplace Suite Windows 0 < 5.6.701.9

References

https://securitydocs.business.xerox.com/wp-content/upload...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.