Vasion Print (formerly PrinterLogic) Readable Cleartext Passwords
Vulnerability Description
Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store a large number of sensitive credentials (database passwords, MySQL root password, SaaS keys, Portainer admin password, etc.) in cleartext files that are world-readable. Any local user - or any process that can read the host filesystem - can retrieve all of these secrets in plain text, leading to credential theft and full compromise of the appliance. The vendor does not consider this to be a security vulnerability as this product "follows a shared responsibility model, where administrators are expected to configure persistent storage encryption."
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-34210
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Pierre Barre
References
- https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-readable-passwords
- https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm
- https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
- https://www.vulncheck.com/advisories/vasion-print-printerlogic-readble-cleartext-passwords
More from Vasion
View All →Affected Vendor
Vasion
View all reports →