PT-2025-17905 · Entrust · Entrust Corp Printer Manager

Victor A. Morales

·

Published

2025-04-25

·

Updated

2025-04-26

·

CVE-2025-28354

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Entrust Corp Printer Manager versions D3.18.4-3 and below
Description An issue in the Printer Manager System of Entrust Corp Printer Manager allows attackers to execute a directory traversal via a crafted POST request.
Recommendations For Entrust Corp Printer Manager versions D3.18.4-3 and below, update to a patched version to prevent directory traversal attacks. As a temporary workaround, consider restricting access to the Printer Manager System until a patch is available. Avoid using crafted POST requests in the affected system until the issue is resolved.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-28354

Affected Products

Entrust Corp Printer Manager