Session Storage Vulnerability in Xerox Workplace Suite
CVE-2024-55931

6.3MEDIUM

Key Information:

Vendor
Xerox
Status
Xerox Workplace Suite
Vendor
CVE Published:
27 January 2025

Summary

Xerox Workplace Suite stores user tokens in session storage, which may lead to unauthorized access if a session is compromised. This flaw highlights the importance of securing session data to prevent potential data breaches. A fix is expected in an upcoming release, and users will receive notifications via security bulletins to ensure they can protect their information.

Affected Version(s)

Xerox Workplace Suite Windows 0 < 5.6.701.9

References

https://securitydocs.business.xerox.com/wp-content/upload...

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.