References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Change History

http://seclists.org/fulldisclosure/2024/Jul/1

https://jvn.jp/en/vu/JVNVU97136265/index.html

https://www.toshibatec.com/information/20240531_01.html

https://www.toshibatec.com/information/pdf/information20240531_01.pdf

Toshiba Corporation http://seclists.org/fulldisclosure/2024/Jul/1 [No types assigned]

The sessions are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.

Toshiba Corporation AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Toshiba Corporation CWE-532

Toshiba Corporation https://jvn.jp/en/vu/JVNVU97136265/index.html [No types assigned]

Toshiba Corporation https://www.toshibatec.com/information/20240531_01.html [No types assigned]

Toshiba Corporation https://www.toshibatec.com/information/pdf/information20240531_01.pdf [No types assigned]