CVE-2006-6438
Last modified
CVE-2006-6438 is a vulnerability of currently unknown severity. Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image Overwrite (IIO), which allows local users to obtain the data by reading the http.log file.. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image Overwrite (IIO), which allows local users to obtain the data by reading the http.log file.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Xerox | Workcentre 232 | All versions |
| Xerox | Workcentre 238 | All versions |
| Xerox | Workcentre 245 | All versions |
| Xerox | Workcentre 255 | All versions |
| Xerox | Workcentre 265 | All versions |
| Xerox | Workcentre 275 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-6438?
How severe is CVE-2006-6438?
How do I fix CVE-2006-6438?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-6432Unspecified vulnerability in the Scan-to-mailbox feature in …
- CVE-2006-6433Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13…
- CVE-2006-6434Unspecified vulnerability in the Web User Interface in Xerox…
- CVE-2006-6435The SNMP implementation in Xerox WorkCentre and WorkCentre P…
- CVE-2006-6436Cross-site scripting (XSS) vulnerability in the Network cont…
- CVE-2006-6437ops3-dmn in Xerox WorkCentre and WorkCentre Pro before 12.05…
- CVE-2006-6439Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13…
- CVE-2006-6440Multiple unspecified vulnerabilities in Xerox WorkCentre and…
- CVE-2006-6441Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13…
- CVE-2006-6442Stack-based buffer overflow in the SetClientInfo function in…
- CVE-2006-6443Buffer overflow in the Novell Distributed Print Services (ND…
- CVE-2006-6444Stack-based buffer overflow in Nostra DivX Player 2.1, 2.2.0…
Are you affected by CVE-2006-6438?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST