CVE-2024-55927 — Flawed token generation implementation & Hard-coded key implementation

CVE-2024-55927

Flawed token generation implementation & Hard-coded key implementation PUBLISHED

Description (CNA)

A vulnerability in Xerox Workplace Suite arises from flawed token generation and the use of hard-coded keys. These weaknesses allow attackers to predict or forge tokens, leading to unauthorized access to sensitive functions.

Affected (CNA)

Vendor / product	Versions
Xerox / Xerox Workplace Suite	affected 0 before 5.6.701.9

CWE

CWE-798

References

https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.