CVE-2019-10058

Various Lexmark products have Incorrect Access Control

published August 28, 2019

CVSS
—
EPSS
1%
Percentile
65.1
In the wild
Unconfirmed
What it is

⚠️ An access control blunder in Lexmark products allows unauthorized users a peek behind the curtain! This could lead to unexpected surprises! Think of it as a hotel where anyone can waltz into the manager's office because the door was left unlocked. Guests could find confidential documents or even change the reservation settings! If someone with no business being there gains access, they could potentially alter settings, view sensitive information, or disrupt operations. While it hasn't been actively exploited yet, the possibility is alarming enough to warrant immediate attention!

Put simply

Think of it as a hotel where anyone can waltz into the manager's office because the door was left unlocked. Guests could find confidential documents or even change the reservation settings! This vulnerability arises from improper access control mechanisms in various Lexmark products, which fail to restrict user access to certain functionalities or data appropriately.

What to do

If someone with no business being there gains access, they could potentially alter settings, view sensitive information, or disrupt operations. While it hasn't been actively exploited yet, the possibility is alarming enough to warrant immediate attention! To mitigate this risk, apply any available patches from Lexmark and ensure that access control settings are correctly configured. It’s also wise to regularly audit user permissions to prevent unauthorized access. Stay vigilant! You've got this! With the right measures in place, you can lock things down tight! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01091 · 65.1th percentile
Published
2019-08-28T15:59Z
EPSS history
Timeline
  • 28 AUG 15:59Z
    Various Lexmark products have Incorrect Access Control
    cvelistv5