Vasion Print and Virtual Appliance Docker Container Privilege Escalation Vulnerability

A vulnerability exists in Vasion Print (formerly PrinterLogic) Virtual Appliance and SaaS deployments, where multiple Docker containers run primary application processes as the root user. This configuration increases the risk of a container compromise leading to lateral movement and host compromise.

Impact

Exploitation of this vulnerability could allow for unauthorized access and actions within the Docker container, potentially leading to a breach of the host system.

Remediation

Users can update to Vasion Print, Virtual Appliance Host v25.2.169 / Application v25.2.1518, which addresses this vulnerability.