CVE-2022-25090

Summary

Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privilege escalation because of a race condition.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://printix.com
• https://www.exploit-db.com/exploits/50812
• http://packetstormsecurity.com/files/166242/Printix-Client-1.3.1106.0-Privilege-Escalation.html
• https://github.com/ComparedArray/printix-CVE-2022-25090
• http://packetstormsecurity.com/files/167012/Printix-1.3.1106.0-Privilege-Escalation.html

References

• https://www.exploit-db.com/exploits/50812
• http://packetstormsecurity.com/files/166242/Printix-Client-1.3.1106.0-Privilege-Escalation.html
• https://github.com/ComparedArray/printix-CVE-2022-25090
• http://packetstormsecurity.com/files/167012/Printix-1.3.1106.0-Privilege-Escalation.html

• ←Previous
• Next→