CVE-2025-27662

The application transmits credentials (passwords) as part of the URL instead of more secure methods such as HTTP headers or form data. Passwords placed in the URL can be logged in server logs, browser history, intermediate proxies, and network monitoring systems. An attacker with access to these sources is able to read passwords in plaintext without needing any special privileges.

An attacker can gain access to user or administrator credentials of the print system, leading to full account takeover and potentially the entire print management environment (violation of confidentiality, integrity, and availability).

The software must be updated to Virtual Appliance Host version 22.0.843 and Application 20.0.1923 or newer. Detailed information is available in the manufacturer's security bulletin at: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm

Vasion Print (formerly PrinterLogic) in versions: Virtual Appliance Host before 22.0.843 and Application before 20.0.1923