PT-2025-40401 · Php+1 · Php+1

Pierre Barre

·

Published

2025-10-02

·

Updated

2025-10-03

·

CVE-2025-34208

CVSS v4.0

8.2

High

VectorAV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) (affected versions not specified)
Description The software stores user passwords using unsalted SHA-512 hashes, with a fallback to unsalted SHA-1. The hashing is performed using PHP's hash() function in multiple files including server write requests users.php, update database.php, legacy/Login.php, and tests/Unit/Api/IdpControllerTest.php. The lack of per-user salt makes the hashing unsuitable for password storage, allowing an attacker with access to the password database to recover cleartext passwords through offline dictionary or rainbow table attacks. The code includes logic that migrates legacy SHA-1 hashes to SHA-512 during login, potentially exposing users still utilizing the older hash.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327CWE-759

Related Identifiers

CVE-2025-34208

Affected Products

Php
Vasion Print