Vasion Print Exposed Internal Docker Instance Vulnerability

A vulnerability exists in Vasion Print Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786, specifically in VA/SaaS deployments. The issue arises because the gateway Docker instance exposes internal micro-service containers without authentication or access controls. This allows unauthorized users to interact with the APIs of these microservices, potentially leading to information disclosure, privilege escalation within the container, or a denial-of-service for the entire appliance.

Impact

Exploitation of this vulnerability could allow unauthorized users to access internal micro-services via their APIs, potentially leading to information disclosure, privilege escalation within the Docker container, or a denial-of-service for the entire Vasion Print appliance.

Remediation

Users can update to Vasion Print Virtual Appliance Host version 22.0.1049 and Application version 20.0.2786 to address this vulnerability.