Vasion Print Cookie Exposure Vulnerability

A vulnerability exists in Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application versions prior to 20.0.1923. This vulnerability allows cookies to be returned in the response body, which undermines the HTTPOnly security feature designed to prevent JavaScript from accessing cookie values. Such exposure could facilitate session hijacking, enabling an attacker to impersonate a user and gain unauthorized access to the console.

Impact

Exploitation of this vulnerability could lead to session hijacking, allowing an attacker to impersonate a user and access sensitive console information.

Remediation

This vulnerability has been fixed in Vasion Print, Virtual Appliance Host 22.0.843 and Application 20.0.1923.