CVE-2025-27673

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017

Critical · published March 5, 2025

CVSS v3.1
9.1
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

🔥 A staggering flaw allows sensitive cookies to be returned in the response body — a security risk that could lead to unauthorized access and data leaks! Think of this vulnerability like a waiter who spills secret sauce all over your table instead of delivering it to the kitchen — the sensitive ingredients are exposed and up for grabs! An attacker could hijack user sessions, access private information, and wreak absolute havoc on your network. The consequences could be devastating, potentially giving them complete control over the system!

Put simply

Think of this vulnerability like a waiter who spills secret sauce all over your table instead of delivering it to the kitchen — the sensitive ingredients are exposed and up for grabs! This vulnerability in Vasion Print allows sensitive session cookies to be returned in the response body, which can be exploited to capture and misuse them for unauthorized access.

What to do

An attacker could hijack user sessions, access private information, and wreak absolute havoc on your network. The consequences could be devastating, potentially giving them complete control over the system! Upgrade your Vasion Print installation to Virtual Appliance Host 22.0.843 and Application 20.0.1923 immediately to close this loophole. Review your security configurations to ensure sensitive information isn’t exposed in the response body moving forward! You've got this! By taking these steps, you'll be securing your environment and keeping the bad guys at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00545 · 44.9th percentile
Published
2025-03-05T00:00Z
EPSS history
Timeline
  • 05 MAR 00:00Z
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017
    cvelistv5