Description

Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privilege escalation because of a race condition.

Related CPE's

a

kofax

printix

Vulnerable

References

http://packetstormsecurity.com/files/166242/Printix-Client-1.3.1106.0-Privilege-Escalation.html

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/167012/Printix-1.3.1106.0-Privilege-Escalation.html

Third Party AdvisoryVDB Entry

http://printix.com

Broken Link

https://github.com/ComparedArray/printix-CVE-2022-25090

Third Party Advisory

https://www.exploit-db.com/exploits/50812

ExploitThird Party AdvisoryVDB Entry

Weaknesses

[email protected]

Primary
CWE-362

CVSS impact metrics

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.1 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2022-03-10T17:47:00.077

3 years ago

Last modified

2022-09-03T03:55:27.193

2 years ago