Lucene search

CVE-2024-27179

🗓️ 14 Jun 2024 04:39:15Reported by ToshibaType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

Admin cookies in clear-text in log

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2024-27179	14 Jun 202404:15	–	nvd
Vulnrichment	CVE-2024-27179 Session disclosure inside the log files	14 Jun 202404:09	–	vulnrichment
Cvelist	CVE-2024-27179 Session disclosure inside the log files	14 Jun 202404:09	–	cvelist
OpenVAS	Toshiba Printers Multiple Vulnerabilities (May 2024)	8 Jul 202400:00	–	openvas
Packet Storm	Toshiba Multi-Function Printers 40 Vulnerabilities	4 Jul 202400:00	–	packetstorm

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "Toshiba Tec e-Studio multi-function peripheral (MFP)",
    "vendor": "Toshiba Tec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "see the reference URL"
      }
    ]
  }
]

Source	Link
toshibatec	www.toshibatec.com/information/pdf/information20240531_01.pdf
toshibatec	www.toshibatec.com/information/20240531_01.html
seclists	www.seclists.org/fulldisclosure/2024/Jul/1
jvn	www.jvn.jp/en/vu/JVNVU97136265/index.html

Parameter	Position	Path	Description	CWE
Session	request body	/contentwebserver	The XML parser is vulnerable to XXE without authentication when sending crafted requests to the /contentwebserver endpoint.	CWE-1295
csrfpId	request body	/contentwebserver	The XML parser is vulnerable to XXE without authentication when sending crafted requests to the /contentwebserver endpoint.	CWE-1295
Session	request body	/contentwebserver/upload	Insecure file upload vulnerability allows attackers to overwrite sensitive files and execute arbitrary code.	CWE-1295
Session	path	/Administration/maintenance/uploadsoft/DriverCustomize.html	Remote code execution through insecure upload functionality in the administrative interface.	CWE-1295

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Jun 2024 04:15Current

5.4Medium risk

Vulners AI Score5.4

CVSS34.7

EPSS0.00034

SSVC

CWE-1295