{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Xerox WorkCentre version 7655 ;",
      "product": {
        "name": "Web",
        "vendor": {
          "name": "Centreon",
          "scada": false
        }
      }
    },
    {
      "description": "Xerox WorkCentre version 7665 ;",
      "product": {
        "name": "Web",
        "vendor": {
          "name": "Centreon",
          "scada": false
        }
      }
    },
    {
      "description": "Xerox WorkCentre version 7675.",
      "product": {
        "name": "Web",
        "vendor": {
          "name": "Centreon",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans Xerox WorkCentre web services. Elle\npermet, sous certaines conditions, \u00e0 un utilisateur distant\nmalintentionn\u00e9 de contourner l\u0027autentification mise en place pour\nacc\u00e9der \u00e0 la Extensible Interface Platform. Ce faisant, il peut modifier\nla configuration du syst\u00e8me sans autorisation pr\u00e9alable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2008-06-13T00:00:00",
  "last_revision_date": "2008-06-13T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Xerox XRX-08-006 du 12 juin 2008 :",
      "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX08_006.pdf"
    }
  ],
  "reference": "CERTA-2008-AVI-321",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2008-06-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans Xerox WorkCentre web services et\npermet de contourner la politique de s\u00e9curit\u00e9 ou de porter atteinte \u00e0\nl\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 de Xerox Work Centre web services",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Xerox du 12 juin 2008",
      "url": null
    }
  ]
}