CVE-2024-55930 Weak default folder permissions
Weak default folder permissions in Xerox Workplace Suite allow unauthorized users to access, modify, or delete files.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-55930?
CVE-2024-55930 is a medium-severity vulnerability in Xerox Workplace Suite, published on 23 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files
Weakness: CWE-276
Which versions are affected by CVE-2024-55930?
It affects 1 product.
Products include Xerox Workplace Suite.
How do I fix CVE-2024-55930?
No fix has been published for CVE-2024-55930 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-55930 being exploited?
There is no known exploitation of CVE-2024-55930 in the wild and no public exploit code.
Other vulnerabilities in Xerox Workplace Suite
- CVE-2024-55926 Arbitrary file upload, deletion and read through header manipulation
- CVE-2024-55927 Flawed token generation implementation & Hard-coded key implementation
- CVE-2024-55925 API Security bypass through header manipulation
- CVE-2024-55931 Token stored in session storage
- CVE-2024-55928 Clear text secrets returned & Remote system secrets in clear text
Sources
Also known as GHSA-xq9p-h64g-x8mc.