Xerox WorkCentre Web Services Extensible Interface Platform Unauthorized Access Vulnerability

Bugtraq ID:	29691
Class:	Access Validation Error
CVE:	CVE-2008-2824
Remote:	Yes
Local:	No
Published:	Jun 12 2008 12:00AM
Updated:	May 07 2015 05:28PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Xerox WorkCentre 7675 0 Xerox WorkCentre 7665 0 Xerox WorkCentre 7655 0
Not Vulnerable:

Xerox WorkCentre Web Services Extensible Interface Platform Unauthorized Access Vulnerability

Xerox WorkCentre is prone to a vulnerability that can result in unauthorized Web Services access.

Attackers can leverage this issue to make changes to system configuration settings.

Xerox WorkCentre Web Services Extensible Interface Platform Unauthorized Access Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Xerox WorkCentre Web Services Extensible Interface Platform Unauthorized Access Vulnerability

Solution:
The vendor has released an advisory and a patch. Please see the references for more information.


Xerox WorkCentre 7655 0

• Xerox cert_P34v1_WC76xx_Patch.zip
  http://www.xerox.com/downloads/usa/en/c/cert_P34v1_WC76xx_Patch.zip

Xerox WorkCentre 7675 0

• Xerox cert_P34v1_WC76xx_Patch.zip
  http://www.xerox.com/downloads/usa/en/c/cert_P34v1_WC76xx_Patch.zip

Xerox WorkCentre 7665 0

• Xerox cert_P34v1_WC76xx_Patch.zip
  http://www.xerox.com/downloads/usa/en/c/cert_P34v1_WC76xx_Patch.zip

Xerox WorkCentre Web Services Extensible Interface Platform Unauthorized Access Vulnerability

References:

• Xerox Homepage (Xerox)
  
• Xerox Security Bulletin XRX08-006 Software update to address Web Services vulner (Xerox)