Critical · published September 30, 2025
🚨 Without a single password, anyone can swap out your SSL certificates! This shocking vulnerability in Vasion Print before version 22.0.1049 is an open invitation for mischief! 🔥 Think of this like giving a stranger the keys to your digital vault without checking their ID. They could not only let themselves in but also change the locks or take whatever they please! An attacker could replace your trusted SSL certificate, leading to potentially catastrophic loss of trust in your services. They could even delete existing certificates, causing immediate service failures or exploit a route to download sensitive client certificates. The fallout could be absolutely devastating!
Think of this like giving a stranger the keys to your digital vault without checking their ID. They could not only let themselves in but also change the locks or take whatever they please! Vasion Print's Virtual Appliance Host exposes four admin routes without any authentication, allowing an unauthenticated attacker to manipulate SSL certificates through the HPCertificateController class, which lacks user validation entirely.
An attacker could replace your trusted SSL certificate, leading to potentially catastrophic loss of trust in your services. They could even delete existing certificates, causing immediate service failures or exploit a route to download sensitive client certificates. The fallout could be absolutely devastating! Upgrade to Vasion Print version 22.0.1049 or later, and 20.0.2786 for the application to close these critical vulnerabilities. Also, review your Docker configurations to ensure sensitive routes are properly secured. Don't let this slip! You've got this! By taking action, you can shore up your defenses and keep your services safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| vasion/virtual_appliance_application | < 20.0.2786 | 20.0.2786 |
| vasion/virtual_appliance_host | < 22.0.1049 | 22.0.1049 |