The vulnerability CVE-2025-34220 affects Vasion Print Virtual Appliance Host and Application in VA/SaaS deployments before versions 25.1.102 and 25.1.1413. It is caused by missing authentication on the /api-gateway/identity/search-groups endpoint, which allows unauthenticated remote attackers to enumerate all group objects for a tenant by sending requests to the tenant-specific URL and manipulating the Host header. The information disclosed includes sensitive internal identifiers such as group IDs, source service IDs, Azure AD object IDs, creation timestamps, and tenant IDs. The vulnerability is categorized under CWE-306 (Missing Authentication for Critical Function) and CWE-200 (Information Exposure). The CVSS 4.0 vector indicates network attack vector, low complexity, no privileges or user interaction required, and low confidentiality impact. The vendor has confirmed the vulnerability is remediated, but the exact patch timing is not specified. Since this is a cloud service, remediation is managed by the vendor.

An unauthenticated remote attacker can enumerate all group objects for a tenant, exposing internal identifiers and metadata such as group IDs, source service IDs, Azure AD object IDs, creation timestamps, and tenant IDs. This information disclosure could aid attackers in further reconnaissance or targeted attacks against the tenant's environment. However, the vulnerability does not allow direct modification or disruption of service. The CVSS score of 6.9 reflects a medium severity impact primarily due to information exposure without authentication.

The vulnerability has been confirmed as remediated by the vendor. Since this is a cloud-hosted service, the vendor manages the remediation server-side. Users should verify with Vasion that their tenant environment is running on the fixed versions (25.1.102 or later for the Virtual Appliance Host and 25.1.1413 or later for the Application) or confirm that the patch has been applied. Patch status is not explicitly dated, so checking the vendor advisory or support channels for confirmation is recommended.