Vulnerability in Vasion Print Virtual Appliance Host and Application Exposes Internal Docker Containers

CVE-2025-34218

What is CVE-2025-34218?

The Vasion Print products have a significant vulnerability that allows unauthorized users to access internal Docker containers via an unsecured API gateway. This issue arises from the absence of authentication, access control lists (ACLs), and network restrictions on the gateway's proxy, effectively exposing micro-service containers to potential attackers. With this exposure, malicious actors can enumerate all internal services, interact with the APIs without authentication, and execute harmful requests. This could lead to serious security breaches, including information disclosure, privilege escalation, or denial-of-service attacks on the appliance. The security advisory from Vasion highlights this vulnerability as V-2024-030, emphasizing the need for immediate patches and protective measures.

References