This vulnerability is due to the dependency on multiple outdated and unsupported third-party components embedded within Docker containers used by Vasion Print Virtual Appliance Host and Application versions prior to specified releases. Components such as Nginx 1.17.x, OpenSSL 1.1.1d, and various end-of-life Linux base images and Laravel/PHP libraries are present, increasing the product's attack surface. These outdated components may contain known vulnerabilities that attackers could leverage in exploitation chains. The vendor has assigned the identifier V-2024-014 to this issue. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

The presence of multiple outdated and end-of-life third-party components within the product's Docker containers significantly increases the attack surface, potentially allowing attackers to exploit known vulnerabilities in these components. This can lead to compromise of confidentiality, integrity, and availability of the affected system. The CVSS 4.0 score of 9.3 reflects a critical impact level. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix links are provided in the available data. Users should monitor the vendor's communications for updates or patches addressing these outdated dependencies. Until a fix is available, consider minimizing exposure of the affected systems and reviewing container images for outdated components to plan for updates.