cveboard RSS feed

CVE-2025-34206

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Vasion Print (formerly PrinterLogic) Insecure Shared Storage Permissions

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) mount host configuration and secret material under /var/www/efs_storage into many Docker containers with overly-permissive filesystem permissions. Files such as secrets.env, GPG-encrypted blobs in .secrets, MySQL client keys, and application session files are accessible from multiple containers. An attacker who controls or reaches any container can read or modify these artifacts, leading to credential theft, RCE via Laravel APP_KEY, Portainer takeover, and full compromise.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Print Virtual Appliance Host

Vendor
Vasion
Product
Print Virtual Appliance Host
Platforms
Unknown
Default status
unknown
Print Virtual Appliance Host · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
*affectedUnavailableUnavailableUnavailableNone listed

Print Application (SaaS/VA)

Vendor
Vasion
Product
Print Application (SaaS/VA)
Platforms
Unknown
Default status
unknown
Print Application (SaaS/VA) · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
*affectedUnavailableUnavailableUnavailableNone listed