seclists.org
http://seclists.org/fulldisclosure/2024/Jul/1 CVE-2024-27179
MEDIUM
Session disclosure inside the log files
Record summary
CVE-2024-27179 has a selected CVSS score of 4.7 (medium).
Description
Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 14, 2024 · Source: CVE List
Affected products and versions
Showing 12 of 41| Product | Source | Version range | Status |
|---|---|---|---|
Toshiba Tec e-Studio multi-function peripheral (MFP)Browse Toshiba Tec Corporation / Toshiba Tec e-Studio multi-function peripheral (MFP)Default status: unaffected | CVE List | see the reference URL | affected |
e-studio-2010-acBrowse toshibatec / e-studio-2010-acDefault status: unknown | CVE List | Through * | affected |
e-studio-2015-ncBrowse toshibatec / e-studio-2015-ncDefault status: unknown | CVE List | Through * | affected |
e-studio-2020_acBrowse toshibatec / e-studio-2020_acDefault status: unknown | CVE List | Through * | affected |
e-studio-2021_acBrowse toshibatec / e-studio-2021_acDefault status: unknown | CVE List | Through * | affected |
e-studio-2110-acBrowse toshibatec / e-studio-2110-acDefault status: unknown | CVE List | Through * | affected |
e-studio-2510-acBrowse toshibatec / e-studio-2510-acDefault status: unknown | CVE List | Through * | affected |
e-studio-2515-ncBrowse toshibatec / e-studio-2515-ncDefault status: unknown | CVE List | Through * | affected |
e-studio-2520_ncBrowse toshibatec / e-studio-2520_ncDefault status: unknown | CVE List | Through * | affected |
e-studio-2521_acBrowse toshibatec / e-studio-2521_acDefault status: unknown | CVE List | Through * | affected |
e-studio-2525_acBrowse toshibatec / e-studio-2525_acDefault status: unknown | CVE List | Through * | affected |
e-studio-2528-aBrowse toshibatec / e-studio-2528-aDefault status: unknown | CVE List | Through * | affected |
References
5jvn.jp
https://jvn.jp/en/vu/JVNVU97136265/index.html nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-27179 toshibatec.com
https://www.toshibatec.com/information/20240531_01.html toshibatec.com
https://www.toshibatec.com/information/pdf/information20240531_01.pdf