CVE-2024-55930
MEDIUMCVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionNVD
Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files
AnalysisAI
Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Incorrect Default Permissions (CWE-276), which allows attackers to access resources due to overly permissive default settings. Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files Affected products include: Xerox Workplace Suite.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Set restrictive default permissions, follow principle of least privilege, review defaults during deployment.
Share
External POC / Exploit Code
Leaving vuln.today