Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL_MACHINE via UITasks.PersistentRegistryData.
Weakness
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Printix | Kofax | * | 1.3.1106.0 (including) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/122.html
- https://cwe.mitre.org/data/definitions/233.html
- https://cwe.mitre.org/data/definitions/58.html
References
- http://packetstormsecurity.com/files/167013/Printix-1.3.1106.0-Privileged-API-Abuse.html
- http://printix.com
- https://github.com/ComparedArray/printix-CVE-2022-25089
- https://www.exploit-db.com/exploits/50798
- http://packetstormsecurity.com/files/167013/Printix-1.3.1106.0-Privileged-API-Abuse.html
- http://printix.com
- https://github.com/ComparedArray/printix-CVE-2022-25089
- https://www.exploit-db.com/exploits/50798