CVE-2006-6430
Summary
| CVE | CVE-2006-6430 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-12-10 11:28:00 UTC |
| Updated | 2017-07-29 01:29:00 UTC |
| Description | Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Xerox | Workcentre 232 | All | All | All | All |
| Hardware | Xerox | Workcentre 232 | All | All | pro | All |
| Hardware | Xerox | Workcentre 232 | All | All | All | All |
| Hardware | Xerox | Workcentre 232 | All | All | pro | All |
| Hardware | Xerox | Workcentre 238 | All | All | All | All |
| Hardware | Xerox | Workcentre 238 | All | All | pro | All |
| Hardware | Xerox | Workcentre 238 | All | All | All | All |
| Hardware | Xerox | Workcentre 238 | All | All | pro | All |
| Hardware | Xerox | Workcentre 245 | All | All | All | All |
| Hardware | Xerox | Workcentre 245 | All | All | pro | All |
| Hardware | Xerox | Workcentre 245 | All | All | All | All |
| Hardware | Xerox | Workcentre 245 | All | All | pro | All |
| Hardware | Xerox | Workcentre 255 | All | All | All | All |
| Hardware | Xerox | Workcentre 255 | All | All | pro | All |
| Hardware | Xerox | Workcentre 255 | All | All | All | All |
| Hardware | Xerox | Workcentre 255 | All | All | pro | All |
| Hardware | Xerox | Workcentre 265 | All | All | All | All |
| Hardware | Xerox | Workcentre 265 | All | All | pro | All |
| Hardware | Xerox | Workcentre 265 | All | All | All | All |
| Hardware | Xerox | Workcentre 265 | All | All | pro | All |
| Hardware | Xerox | Workcentre 275 | All | All | All | All |
| Hardware | Xerox | Workcentre 275 | All | All | pro | All |
| Hardware | Xerox | Workcentre 275 | All | All | All | All |
| Hardware | Xerox | Workcentre 275 | All | All | pro | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Xerox WorkCentre and WorkCentre Pro Multiple Vulnerabilities | BID | www.securityfocus.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| XEROX WorkCentre Products Multiple Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf | CONFIRM | www.xerox.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.