Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-27157 EUVD-2024-24398GHSA-c527-hcf9-m2ff

Leak of authentication sessions in secure logs

Published Jun 14, 2024 · Updated Feb 13, 2025 · Assigned by Toshiba

Description

The sessions are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.

Affected products

VendorProductAffectedFixed
Toshiba Tec Toshiba Tec e-Studio multi-function peripheral (MFP) see the reference URL —

References