HP DesignJet Products Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in certain HP DesignJet products. This issue arises through the printer's web interface, where unauthenticated users can access sensitive print job information. The vulnerability affects several different models within the HP DesignJet series.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive print job information.

Remediation

HP has released an updated firmware version for affected products. Users should visit the HP Software and Driver Downloads page to obtain the firmware. After updating, it's recommended to set up the printer to require administrator authentication for accessing Job Queue web pages. This can be done by unchecking certain options in the Embedded Web Server's security settings and ensuring that only the Device Administrator has permission to configure security settings.