Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-55931 EUVD-2024-52855GHSA-vhqh-w8vh-h8h6

Token stored in session storage

Published Jan 27, 2025 · Updated Feb 24, 2025 · Assigned by Xerox

Description

Xerox Workplace Suite stores tokens in session storage, which may expose them to potential access if a user's session is compromised. 

The patch for this vulnerability will be included in a future release of Workplace Suite, and customers will be notified through an update to the security bulletin.

Affected products

VendorProductAffectedFixed
Xerox Xerox Workplace Suite < 5.6.701.9 5.6.701.9

References