Vasion Print Virtual Appliance Host and Application expose four admin routes without authentication checks. These routes, handled by the HPCertificateController class, allow unauthenticated attackers to upload new TLS/SSL certificates, delete existing certificates, or download stored CA and client certificates. The service-clients endpoint suffers from an IDOR vulnerability enabling enumeration of all client IDs. This vulnerability is tracked as CVE-2025-34222 and identified by the vendor as V-2024-028. It affects VA/SaaS deployments prior to specified versions and is located in the printercloud/pi Docker container's /var/www/app/routes/web.php file.

An unauthenticated attacker can fully control critical SSL/TLS certificates used by the appliance, enabling them to replace trusted roots, delete certificates causing service trust failures, or exfiltrate sensitive certificate data. This compromises the integrity and trust of secure communications and could lead to man-in-the-middle attacks or denial of service for dependent services. The vulnerability's critical CVSS score reflects the high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix information is provided in the available data. Until a fix is available, restrict network access to the affected appliance's admin routes to trusted administrators only and monitor for unauthorized access attempts. Follow vendor advisories closely for updates on remediation or official fixes.