Skip to content
OpenAdvisories
High WID-SEC-2025-2208 2 CVEs

Vasion Print: Mehrere Schwachstellen

Published Oct 5, 2025 · Updated Oct 5, 2025 · de-DE

Vendor: Vasion Product: Print Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vasion Print ausnutzen, um Passwörter offenzulegen und dadurch Administratorrechte zu erlangen.

Product

Vasion Print (ehemals PrintLogic) ist eine Softwarelösung, die das Druckmanagement und die Dokumentenautomatisierung in Unternehmen ermöglicht.

Vulnerabilities 2

  • Critical 9.4
    CVE-2025-34210

    Vasion Print (formerly PrinterLogic) Readable Cleartext Passwords

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store a large number of sensitive credentials (database passwords, MySQL root password, SaaS keys, Portainer admin password, etc.) in cleartext files that are wo…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.2
    CVE-2025-34208

    Vasion Print (formerly PrinterLogic) Insecure Password Hashing

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store user passwords using unsalted SHA-512 hashes with a fall-back to unsalted SHA-1. The hashing is performed via PHP's `hash()` function in multiple files (se…

    Vasion Print Virtual Appliance Host Print Application

Revision history

  1. #1

    Initiale Fassung

References