CVE-2021-42641

HIGH

PrinterLogic Web Stack <= 19.1.1.13 SP9 - Unauthenticated Insecure Direct Object Reference

Title source: llm

Description

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the username and email address of all users.

References (7)

Core 7

Core References

Product x_refsource_misc

http://printerlogic.com

Vendor Advisory x_refsource_confirm

https://www.printerlogic.com/security-bulletin/

Exploit, Third Party Advisory x_refsource_misc

https://www.yahooinc.com/paranoids/paranoids-vulnerability-research-printerlogic-issues-security-alert/

Third Party Advisory x_refsource_misc

https://www.securityweek.com/printerlogic-patches-code-execution-flaws-printer-management-suite

Third Party Advisory x_refsource_misc

https://securityaffairs.co/wordpress/127194/security/printerlogic-printer-management-suite-flaws.html

Third Party Advisory x_refsource_misc

https://portswigger.net/daily-swig/printerlogic-vendor-addresses-triple-rce-threat-against-all-connected-endpoints

Third Party Advisory x_refsource_misc

https://thecyberthrone.in/2022/01/26/printerlogic-%F0%9F%96%A8-fixes-critical-vulnerabilities-in-its-suite/?utm_source=rss&utm_medium=rss&utm_campaign=printerlogic-%25f0%259f%2596%25a8-fixes-critical-vulnerabilities-in-its-suite

Scores

CVSS v3 7.5

EPSS 0.0206

EPSS Percentile 78.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-668

Status published

Products (2)

printerlogic/web_stack 19.1.1.13 (4 CPE variants)

printerlogic/web_stack < 19.1.1.13

Published Feb 02, 2022

Tracked Since Feb 18, 2026