PT-2022-17071 · Printix · Printix Secure Cloud Print Management

Logan Latvala · Published 2022-03-09 · Updated 2022-09-03 · CVE-2022-25090

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Printix Secure Cloud Print Management versions 1.3.1106.0 and earlier

Description The issue is related to the creation of a temporary temp.ini file in a directory with insecure permissions, leading to privilege escalation due to a race condition.

Recommendations For versions 1.3.1106.0 and earlier, consider restricting access to the directory where the temp.ini file is created to minimize the risk of exploitation. As a temporary workaround, ensure that the directory permissions are secure to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2022-25090

Affected Products

Printix Secure Cloud Print Management

References · 10

• 🔥 https://github.com/ComparedArray/printix-CVE-2022-25090 · Exploit
• 🔥 http://packetstormsecurity.com/files/166242/Printix-Client-1.3.1106.0-Privilege-Escalation.html · Exploit
• 🔥 https://exploit-db.com/exploits/50812 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-25090 · Security Note
• https://osv.dev/vulnerability/CVE-2022-25090 · Vendor Advisory
• http://printix.com · Note
• https://t.me/cvenotify/35685 · Telegram Post
• https://t.me/cvenotify/29956 · Telegram Post
• http://packetstormsecurity.com/files/167012/Printix-1.3.1106.0-Privilege-Escalation.html · Note
• https://t.me/defcon_news/98088 · Telegram Post