Sign In
Advisories

Vasion Print (formerly PrinterLogic) Undocumented Local Account with Hardcoded Password and Passwordless sudo

Go Back
severity
high
date
Affecting

  • Print Virtual Appliance Host < 22.0.951

  • Print Application < 20.0.2368

  • VA and SaaS deployments

  • The patch for this vulnerability is reported to be incomplete - /etc/shadow was remediated but /etc/sudoers remains vulnerable.

CVE type
Use of Hard-coded Credentials
CVSS
8.6
CVSS V4 Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Credit
Pierre Barre