GCVE - cpe:2.3:a:printeron:central_print_services:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:printeron:central_print_services:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Printeron (`e9220d42-6c6d-5723-a59d-abc20333fa36`)
Product	Central Print Services (`0af8b488-f609-5aca-83ee-183c5a5b9cd3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-17213`	vulnerable	2026-06-08 05:11:06.170655	Details available An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. A user without valid credentials can bypass the authentication process, obtaining a valid session cookie with guest/pseudo-guest level privileges. This cookie can then be further used to perform other attacks. Published: 2019-07-29T17:37:41.000Z Updated: 2024-08-05T10:47:03.738Z Open on db.gcve.eu Reference links https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17213-Authentication_Bypass-PrinterOn	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17211`	vulnerable	2026-06-08 05:11:06.170097	Details available An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. An unauthenticated attacker can view details about the printers associated with CPS via a crafted HTTP GET request. Published: 2019-07-29T17:30:43.000Z Updated: 2024-08-05T10:47:04.024Z Open on db.gcve.eu Reference links https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17211-Unauthenticated_Information_Disclosure-PrinterOn	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17210`	vulnerable	2026-06-08 05:11:06.169715	Details available An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass the session checks (that would otherwise logout a low-privileged user) by calling the core print job components directly via crafted HTTP GET and POST requests. Published: 2019-07-19T23:19:50.000Z Updated: 2024-08-05T10:47:03.934Z Open on db.gcve.eu Reference links https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17210-Authorization_Bypass-PrinterOn	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.