CVE-2024-27156 - Vulnerability Details - OpenCVE

The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00215.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2024-24397	The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.

Fixes

Solution

This issue is fixed in the version released on June 14, 2024 and all later versions.

Workaround

When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users.

References

Link	Providers
http://seclists.org/fulldisclosure/2024/Jul/1
https://jvn.jp/en/vu/JVNVU97136265/index.html
https://www.toshibatec.com/information/20240531_01.html
https://www.toshibatec.com/information/pdf/information20240531_01.pdf

History

Thu, 13 Feb 2025 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Toshiba

Published: 2024-06-14T03:20:49.798Z

Updated: 2025-02-13T17:46:03.200Z

Reserved: 2024-02-21T02:11:56.735Z

Link: CVE-2024-27156

Vulnrichment

Updated: 2024-08-02T00:27:59.190Z

NVD

Status : Awaiting Analysis

Published: 2024-06-14T04:15:18.743

Modified: 2024-11-21T09:03:58.593

Link: CVE-2024-27156

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-27156", "assignerOrgId": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "state": "PUBLISHED", "assignerShortName": "Toshiba", "dateReserved": "2024-02-21T02:11:56.735Z", "datePublished": "2024-06-14T03:20:49.798Z", "dateUpdated": "2025-02-13T17:46:03.200Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Linux"], "product": "Toshiba Tec e-Studio multi-function peripheral (MFP)", "vendor": "Toshiba Tec Corporation", "versions": [{"status": "affected", "version": "see the reference URL"}]}], "credits": [{"lang": "en", "type": "finder", "value": "We expresses its gratitude to Pierre Barre for reporting relevant security vulnerabilities for our products."}], "datePublic": "2024-06-14T02:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL."}], "value": "The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL."}], "exploits": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "We are not aware of any malicious exploitation by these vulnerabilities.<br>"}], "value": "We are not aware of any malicious exploitation by these vulnerabilities."}], "impacts": [{"capecId": "CAPEC-37", "descriptions": [{"lang": "en", "value": "CAPEC-37 Retrieve Embedded Sensitive Data"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-532", "description": "CWE-532 Insertion of Sensitive Information into Log File", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "shortName": "Toshiba", "dateUpdated": "2024-07-04T05:06:32.872Z"}, "references": [{"url": "https://www.toshibatec.com/information/20240531_01.html"}, {"url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf"}, {"url": "https://jvn.jp/en/vu/JVNVU97136265/index.html"}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/1"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "This issue is fixed in the version released on June 14, 2024 and all later versions.<br>"}], "value": "This issue is fixed in the version released on June 14, 2024 and all later versions."}], "source": {"discovery": "UNKNOWN"}, "timeline": [{"lang": "en", "time": "2024-06-14T02:00:00.000Z", "value": "Fixes will be released"}], "title": "Leak of authentication sessions in secure logs", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users.<br>"}], "value": "When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users."}], "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-14T18:15:44.657901Z", "id": "CVE-2024-27156", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-14T18:15:52.105Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:27:59.190Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.toshibatec.com/information/20240531_01.html", "tags": ["x_transferred"]}, {"url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU97136265/index.html", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/1", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.toshibatec.com/information/20240531_01.html", "tags": ["x_transferred"]}, {"url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU97136265/index.html", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/1", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:27:59.190Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-27156", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-14T18:15:44.657901Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-14T18:15:48.530Z"}}], "cna": {"title": "Leak of authentication sessions in secure logs", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "We expresses its gratitude to Pierre Barre for reporting relevant security vulnerabilities for our products."}], "impacts": [{"capecId": "CAPEC-37", "descriptions": [{"lang": "en", "value": "CAPEC-37 Retrieve Embedded Sensitive Data"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Toshiba Tec Corporation", "product": "Toshiba Tec e-Studio multi-function peripheral (MFP)", "versions": [{"status": "affected", "version": "see the reference URL"}], "platforms": ["Linux"], "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "We are not aware of any malicious exploitation by these vulnerabilities.", "supportingMedia": [{"type": "text/html", "value": "We are not aware of any malicious exploitation by these vulnerabilities.<br>", "base64": false}]}], "timeline": [{"lang": "en", "time": "2024-06-14T02:00:00.000Z", "value": "Fixes will be released"}], "solutions": [{"lang": "en", "value": "This issue is fixed in the version released on June 14, 2024 and all later versions.", "supportingMedia": [{"type": "text/html", "value": "This issue is fixed in the version released on June 14, 2024 and all later versions.<br>", "base64": false}]}], "datePublic": "2024-06-14T02:00:00.000Z", "references": [{"url": "https://www.toshibatec.com/information/20240531_01.html"}, {"url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf"}, {"url": "https://jvn.jp/en/vu/JVNVU97136265/index.html"}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/1"}], "workarounds": [{"lang": "en", "value": "When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users.", "supportingMedia": [{"type": "text/html", "value": "When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users.<br>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.", "supportingMedia": [{"type": "text/html", "value": "The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-532", "description": "CWE-532 Insertion of Sensitive Information into Log File"}]}], "providerMetadata": {"orgId": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "shortName": "Toshiba", "dateUpdated": "2024-07-04T05:06:32.872Z"}}}, "cveMetadata": {"cveId": "CVE-2024-27156", "state": "PUBLISHED", "dateUpdated": "2025-02-13T17:46:03.200Z", "dateReserved": "2024-02-21T02:11:56.735Z", "assignerOrgId": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "datePublished": "2024-06-14T03:20:49.798Z", "assignerShortName": "Toshiba"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL."}, {"lang": "es", "value": "Las cookies de sesi\u00f3n, utilizadas para la autenticaci\u00f3n, se almacenan en registros de texto plano. Un atacante puede recuperar sesiones de autenticaci\u00f3n. Un atacante remoto puede recuperar las credenciales y eludir el mecanismo de autenticaci\u00f3n. En cuanto a los productos/modelos/versiones afectados, consulte la URL de referencia."}], "id": "CVE-2024-27156", "lastModified": "2024-11-21T09:03:58.593", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 4.2, "source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "type": "Secondary"}]}, "published": "2024-06-14T04:15:18.743", "references": [{"source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "url": "http://seclists.org/fulldisclosure/2024/Jul/1"}, {"source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "url": "https://jvn.jp/en/vu/JVNVU97136265/index.html"}, {"source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "url": "https://www.toshibatec.com/information/20240531_01.html"}, {"source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/fulldisclosure/2024/Jul/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://jvn.jp/en/vu/JVNVU97136265/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.toshibatec.com/information/20240531_01.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf"}], "sourceIdentifier": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-532"}], "source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "type": "Secondary"}]}