Vasion Print Virtual Appliance Host and application versions before 22.0.951 and 20.0.2368 respectively contain an undocumented local user 'ubuntu' with a hardcoded password and a sudoers entry granting passwordless root privileges. This configuration enables local attackers who know the password to escalate privileges to root. The vulnerability is tracked as CWE-798 (Use of Hard-coded Credentials). The vendor's partial fix addressed the password storage in /etc/shadow but did not remove or secure the sudoers entry, leaving the risk of privilege escalation intact.

An attacker with local console or equivalent administrative access who knows the hardcoded password can gain root privileges on the affected system. This allows full control over the appliance, potentially compromising confidentiality, integrity, and availability of the system and any connected resources. The vulnerability does not require user interaction or prior privileges, making it a significant local privilege escalation risk.

Patch status is not yet confirmed as fully effective. The vendor has partially remediated the issue by securing /etc/shadow, but the /etc/sudoers file remains vulnerable. Administrators should monitor vendor advisories for a complete fix that removes or secures the hardcoded sudoers entry. Until a full patch is available, restrict physical and local console access to trusted personnel only to mitigate exploitation risk.