Critical · published September 19, 2025
⚡ Multiple Docker containers are running as root in Vasion Print's Virtual Appliance, multiplying the risks like a game of Whac-A-Mole gone wild! 🔥 Think of it as a restaurant kitchen where every chef has access to the entire storage area — if one chef gets a little too creative with their ingredients, they could spoil the whole batch! A breach in any one of these containers could lead to a full compromise of the host system, allowing attackers to move laterally through your network and access sensitive data. This is like an uninvited guest who sneaks into a party and starts tampering with everything, putting the entire event at risk!
Think of it as a restaurant kitchen where every chef has access to the entire storage area — if one chef gets a little too creative with their ingredients, they could spoil the whole batch! This vulnerability arises because the Vasion Print Virtual Appliance runs key application processes, including PHP workers and Node.js servers, as the root user within Docker containers, which significantly heightens the risk of compromise.
A breach in any one of these containers could lead to a full compromise of the host system, allowing attackers to move laterally through your network and access sensitive data. This is like an uninvited guest who sneaks into a party and starts tampering with everything, putting the entire event at risk! To mitigate this risk, it's crucial to reconfigure these Docker containers to run as non-root users. Additionally, consider conducting a security audit of your container orchestration to enhance overall security posture. You've got this! With the right steps, you can fortify your defenses and keep your systems safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| vasion/virtual_appliance_application | all versions | — |
| vasion/virtual_appliance_host | all versions | — |