Critical · published September 30, 2025
🚨 A default admin account with no authentication? This vulnerability in Vasion Print is a security disaster waiting to happen! 🔥 Think of it like leaving the front door to your house wide open, with a welcome mat that says 'Help yourself!' An attacker just needs to walk in, change the locks, and take over your entire home. With an unauthenticated remote attacker controlling the system, they can access sensitive data, manipulate configurations, and wreak havoc at will. This is absolutely devastating for any organization relying on the affected versions of Vasion Print, as they could lose critical functions and data integrity.
Think of it like leaving the front door to your house wide open, with a welcome mat that says 'Help yourself!' An attacker just needs to walk in, change the locks, and take over your entire home. The vulnerability exists in Vasion Print’s installation interface, allowing attackers to post arbitrary credentials to a database update script without authentication. This lets them replace default admin credentials using hard-coded hash values to bypass password policies.
With an unauthenticated remote attacker controlling the system, they can access sensitive data, manipulate configurations, and wreak havoc at will. This is absolutely devastating for any organization relying on the affected versions of Vasion Print, as they could lose critical functions and data integrity. Immediately update Vasion Print to versions 22.0.1049 or later for the Virtual Appliance Host and 20.0.2786 or later for the Application. Ensure that you eliminate any default credentials and review security measures during installation to prevent unauthorized access. You've got this! Follow these steps, and you'll be back in the security hero lane in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| vasion/virtual_appliance_application | < 20.0.2786 | 20.0.2786 |
| vasion/virtual_appliance_host | < 22.0.1049 | 22.0.1049 |