Xerox Workplace Suite stores tokens in session storage, which may expose them to potential access if a users session is compromised.
The patch for this vulnerability will be included in a future release of Workplace Suite, and customers will be notified through an update to the security bulletin.
Weakness
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Workplace_suite | Xerox | * | 5.6.701.9 (excluding) |