Lucene search
HistoryDec 10, 2006 - 11:28 a.m.
CVE-2006-6438
xerox
workcentre
data exposure
cve-2006-6438
security vulnerability
nvd
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image Overwrite (IIO), which allows local users to obtain the data by reading the http.log file.
Affected configurations
Node
xeroxworkcentre_232
ORxeroxworkcentre_232pro
ORxeroxworkcentre_238
ORxeroxworkcentre_238pro
ORxeroxworkcentre_245
ORxeroxworkcentre_245pro
ORxeroxworkcentre_255
ORxeroxworkcentre_255pro
ORxeroxworkcentre_265
ORxeroxworkcentre_265pro
ORxeroxworkcentre_275
ORxeroxworkcentre_275pro
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2006-6438