CVE-2006-6438: Medium severity Xerox Workcentre 255 vulnerability
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image Overwrite (IIO), which allows local users to obtain the data by reading the http.log file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6438?
CVE-2006-6438 is considered a moderate severity vulnerability due to its potential exposure of sensitive user data.
How do I fix CVE-2006-6438?
To fix CVE-2006-6438, users should update their Xerox WorkCentre devices to the latest firmware versions released after 12.050.03.000, 13.x 13.050.03.000, or 14.x 14.050.03.000.
What types of devices are affected by CVE-2006-6438?
CVE-2006-6438 affects various models of Xerox WorkCentre including 232, 238, 245, 255, 265, and 275.
Who can exploit CVE-2006-6438?
CVE-2006-6438 can be exploited by local users who have access to the http.log file on vulnerable Xerox WorkCentre devices.
What data is exposed due to CVE-2006-6438?
CVE-2006-6438 exposes sensitive user data that remains in the http.log after an Immediate Image Overwrite (IIO) operation.