XEROX WorkCentre contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an error within the 'Scan to Email' functionality occurs, resulting in merging two documents into one, which may be exploited by a local attacker to view a document scanned by another person.
Classification
Location:
Local Access Required
Attack Type:
Information Disclosure
Impact:
Loss of Confidentiality
Solution:
Patch / RCS
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified
Solution
Currently, there are no known workarounds or upgrades to correct this issue. However, Xerox has released a patch to address this vulnerability.
