PT-2019-17933 · Fuji Xerox · Apeosware Management Suite

Published 2019-09-12 · Updated 2019-09-16 · CVE-2019-6004

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ApeosWare Management Suite versions 1.4.0.18 and earlier ApeosWare Management Suite 2 versions 2.1.2.4 and earlier

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks.

Recommendations For ApeosWare Management Suite versions 1.4.0.18 and earlier, update to a version later than 1.4.0.18. For ApeosWare Management Suite 2 versions 2.1.2.4 and earlier, update to a version later than 2.1.2.4.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2019-6004

Affected Products

Apeosware Management Suite

References · 4

• http://onlinesupport.fujixerox.com/processDriverForm.do?ctry_code=SG&lang_code=en&d_lang=en&corp_pid=AWMS2&rts=null&model=ApeosWare+Management+Suite+2&type_id=7&oslist=Windows+10+64bit&lang_list=en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6004 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6004 · Vendor Advisory
• http://jvn.jp/en/jp/JVN07679150/index.html · Note