CVE-2018-17213

HIGH

PrinterOn Central Print Services < 4.1.4 - Unauthenticated Authentication Bypass

Title source: llm

Description

An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. A user without valid credentials can bypass the authentication process, obtaining a valid session cookie with guest/pseudo-guest level privileges. This cookie can then be further used to perform other attacks.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17213-Authentication_Bypass-PrinterOn

Scores

CVSS v3 8.8

EPSS 0.0143

EPSS Percentile 69.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-287

Status published

Products (1)

printeron/central_print_services < 4.1.4

Published Jul 29, 2019

Tracked Since Feb 18, 2026