Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-27156 EUVD-2024-24397GHSA-469r-4m5m-6p66

Leak of authentication sessions in secure logs

Published Jun 14, 2024 · Updated Feb 13, 2025 · Assigned by Toshiba

Description

The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.

Affected products

VendorProductAffectedFixed
Toshiba Tec Toshiba Tec e-Studio multi-function peripheral (MFP) see the reference URL —

References