1. Home
  2. CVE Database
  3. CVE-2024-55925
HIGH · 7.5

CVE-2024-55925

In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header. If the server improperly validates or trusts the Host header without verifying the actual...

Vulnerability Description

In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header. If the server improperly validates or trusts the Host header without verifying the actual destination, an attacker can forge a value to gain unauthorized access. This exploit targets improper host validation, potentially exposing sensitive API endpoints.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
XeroxWorkplace Suite< 5.6.701.9

Related Weaknesses (CWE)

CWE-290

References

FAQ

What is CVE-2024-55925?

CVE-2024-55925 is a vulnerability with a CVSS score of 7.5 (HIGH). In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header. If the server improperly validates or trusts the Host header without verifying the actual...

How severe is CVE-2024-55925?

CVE-2024-55925 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-55925?

Check the references section above for vendor advisories and patch information. Affected products include: Xerox Workplace Suite.