OSVDB ID: 69790 Title: XEROX WorkCentre Scan to Email Document Merging Local Information Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
XEROX WorkCentre contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an error within the 'Scan to Email' functionality occurs, resulting in merging two documents into one, which may be exploited by a local attacker to view a document scanned by another person. |
Classification |
Location:
Local Access Required
Attack Type: Information Disclosure Impact: Loss of Confidentiality Solution: Patch / RCS Exploit: Exploit Unknown Disclosure: Vendor Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Xerox has released a patch to address this vulnerability. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |