CVE-2024-27179

Session disclosure inside the log files

Published Jun 14, 2024 CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Description
Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.

Remediation

Vendor Solution

This issue is fixed in the version released on June 14, 2024 and all later versions.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-24420 Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.
History
Type Values Removed Values Added
First Time appeared Toshibatec
Toshibatec e-studio-2010-ac
Toshibatec e-studio-2015-nc
Toshibatec e-studio-2020 Ac
Toshibatec e-studio-2021 Ac
Toshibatec e-studio-2110-ac
Toshibatec e-studio-2510-ac
Toshibatec e-studio-2515-nc
Toshibatec e-studio-2520 Nc
Toshibatec e-studio-2521 Ac
Toshibatec e-studio-2525 Ac
Toshibatec e-studio-2528-a
Toshibatec e-studio-2610-ac
Toshibatec e-studio-2615-nc
Toshibatec e-studio-3015-nc
Toshibatec e-studio-3025 Ac
Toshibatec e-studio-3028-a
Toshibatec e-studio-3115-nc
Toshibatec e-studio-330-ac
Toshibatec e-studio-3515-nc
Toshibatec e-studio-3525 Ac
Toshibatec e-studio-3525 Acg
Toshibatec e-studio-3528-a
Toshibatec e-studio-3528-ag
Toshibatec e-studio-3615-nc
Toshibatec e-studio-400-ac
Toshibatec e-studio-4525 Ac
Toshibatec e-studio-4528-a
Toshibatec e-studio-4528-ag
Toshibatec e-studio-5525 Ac
Toshibatec e-studio-5525 Acg
Toshibatec e-studio-5528-a
Toshibatec e-studio-6525 Ac
Toshibatec e-studio-6525 Acg
Toshibatec e-studio-6526-ac
Toshibatec e-studio-6527-ac
Toshibatec e-studio-6528-a
Toshibatec e-studio-6529-a
Toshibatec e-studio-7527-ac
Toshibatec e-studio-7529-a
Toshibatec e-studio-9029-a
CPEs cpe:2.3:h:toshibatec:e-studio-2010-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2015-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2020_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2021_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2110-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2510-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2515-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2520_nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2521_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2525_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2528-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2610-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2615-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3015-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3025_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3028-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3115-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-330-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3515-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3525_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3525_acg:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3528-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3528-ag:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3615-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-400-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-4525_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-4528-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-4528-ag:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-5525_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-5525_acg:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-5528-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-6525_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-6525_acg:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-6526-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-6527-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-6528-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-6529-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-7527-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-7529-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-9029-a:-:*:*:*:*:*:*:*
Vendors & Products Toshibatec
Toshibatec e-studio-2010-ac
Toshibatec e-studio-2015-nc
Toshibatec e-studio-2020 Ac
Toshibatec e-studio-2021 Ac
Toshibatec e-studio-2110-ac
Toshibatec e-studio-2510-ac
Toshibatec e-studio-2515-nc
Toshibatec e-studio-2520 Nc
Toshibatec e-studio-2521 Ac
Toshibatec e-studio-2525 Ac
Toshibatec e-studio-2528-a
Toshibatec e-studio-2610-ac
Toshibatec e-studio-2615-nc
Toshibatec e-studio-3015-nc
Toshibatec e-studio-3025 Ac
Toshibatec e-studio-3028-a
Toshibatec e-studio-3115-nc
Toshibatec e-studio-330-ac
Toshibatec e-studio-3515-nc
Toshibatec e-studio-3525 Ac
Toshibatec e-studio-3525 Acg
Toshibatec e-studio-3528-a
Toshibatec e-studio-3528-ag
Toshibatec e-studio-3615-nc
Toshibatec e-studio-400-ac
Toshibatec e-studio-4525 Ac
Toshibatec e-studio-4528-a
Toshibatec e-studio-4528-ag
Toshibatec e-studio-5525 Ac
Toshibatec e-studio-5525 Acg
Toshibatec e-studio-5528-a
Toshibatec e-studio-6525 Ac
Toshibatec e-studio-6525 Acg
Toshibatec e-studio-6526-ac
Toshibatec e-studio-6527-ac
Toshibatec e-studio-6528-a
Toshibatec e-studio-6529-a
Toshibatec e-studio-7527-ac
Toshibatec e-studio-7529-a
Toshibatec e-studio-9029-a
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Toshiba
Published
Updated
Feb 13, 2025, 5:46 PM
Reserved
Feb 21, 2024, 2:12 AM
Status
Deferred
Published
Jun 14, 2024, 4:15 AM
Modified
Jun 17, 2026, 7:19 AM