CVE-2024-55930 MEDIUM

CVE-2024-55930: Weak default folder permissions

Vendor Xerox
Product Xerox Workplace Suite
Weakness CWE-276
Published January 23, 2025
Last update February 24, 2025
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files

Key dates

02Disclosure timeline

January 23, 2025 CVE published
February 24, 2025 Record updated