CVE-2025-34220
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Summary
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contains a /api-gateway/identity/search-groups endpoint that does not require authentication. Requests to https://<tenant>.printercloud10.com/api-gateway/identity/search-groups and adjustments to the Host header allow an unauthenticated remote attacker to enumerate every group object stored for that tenant. The response includes internal identifiers (group ID, source service ID, Azure AD object IDs, creation timestamps, and tenant IDs). This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Vasion | Print Virtual Appliance Host | 0 < 25.1.102 | affected |
| Vasion | Print Application | 0 < 25.1.1413 | affected |
Weaknesses
- CWE-306: CWE-306 Missing Authentication for Critical Function
- CWE-200: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: poc
- Automatable: yes
- Technical Impact: partial
Additional References
References
- https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-api-leak
- https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm
- https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
- https://www.vulncheck.com/advisories/vasion-print-printerlogic-unauth-api-leaks-group-info
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.