CVE-2024-55927

Flawed token generation implementation & Hard-coded key implementation

State: Published
Severity: 7.6 High
Published: Jan 23, 2025
Updated: Feb 24, 2025
Reserved: Dec 13, 2024

Description

A vulnerability in Xerox Workplace Suite arises from flawed token generation and the use of hard-coded keys. These weaknesses allow attackers to predict or forge tokens, leading to unauthorized access to sensitive functions.

Scores

CVSS	Score	Vector	Source
3.1	7.6 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L	Xerox

Weaknesses

CWE-798 Use of Hard-coded Credentials

Affected Products

Product	Versions
Xerox Workplace SuiteXerox	before 5.6.701.9Affected

References

https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.