CVE-2024-55931

Published: Jan 27, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Xerox Workplace Suite stores tokens in session storage, which may expose them to potential access if a user's session is compromised. The patch for this vulnerability will be included in a future release of Workplace Suite, and customers will be notified through an update to the security bulletin.

Affected (1)

Products: Xerox: Workplace Suite

1 product

Workplace Suite

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xerox Workplace Suite	Before 5.6.701.9

Related CWEs

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (1)

https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf

Source: 10b61619-3869-496c-8a1e-f291b0e71e3f

Vendor Advisory

Timeline

No history available yet.