Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2024-27179

Session disclosure inside the log files

Description

Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)

Default version status: unaffected

  • see the reference URLaffected

References