WebClientPrint Processor 2.0.15.109 TLS Validation
Posted by deepcore on August 24, 2017 – 4:45 am
RedTeam Pentesting discovered that WebClientPrint Processor (WCPP) does not validate TLS certificates when initiating HTTPS connections. Thus, a man-in-the-middle attacker may intercept and/or modify HTTPS traffic in transit. This may result in a disclosure of sensitive information and the integrity of printed documents cannot be guaranteed. Version 2.0.15.109 is affected.
Post a reply
You must be logged in to post a comment.