Skip to content
OpenAdvisories
Medium · 4.7 CVE-2024-27179 EUVD-2024-24420GHSA-q76q-cwc5-25wv

Session disclosure inside the log files

Published Jun 14, 2024 · Updated Feb 13, 2025 · Assigned by Toshiba

Description

Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.

Affected products

VendorProductAffectedFixed
Toshiba Tec Toshiba Tec e-Studio multi-function peripheral (MFP) see the reference URL —

References