CVE-2024-55927CWE-798

Flawed token generation implementation & Hard-coded key implementation

High · published January 23, 2025

CVSS v3.1
7.6
EPSS
0%
Percentile
18.1
In the wild
Unconfirmed
What it is

A vulnerability in Xerox Workplace Suite arises from flawed token generation and the use of hard-coded keys. These weaknesses allow attackers to predict or forge tokens, leading to unauthorized access to sensitive functions.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00269 · 18.1th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-01-23T17:20Z
EPSS history
Timeline
  • 23 JAN 17:20Z
    Flawed token generation implementation & Hard-coded key implementation
    cvelistv5