docuFORM Managed Print Service Client Directory Traversal Vulnerability Allowing Arbitrary File Read

A directory traversal vulnerability has been identified in docuFORM Managed Print Service Client version 11.11c. This vulnerability allows attackers to read arbitrary files by exploiting crafted URLs. The issue arises from improper validation of user-supplied input used to construct file paths, enabling attackers to escape restricted directories and access sensitive files on the underlying file system. The vulnerability can be exploited remotely via unauthenticated requests.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files outside the application's designated directory, including configuration files, application source code, system files, and user-specific data.