Technical impact
The reported vulnerability is a directory traversal flaw within the docuFORM Managed Print Service Client version 11.11c. An attacker can craft a URL that manipulates path traversal characters, enabling reading of arbitrary files on the host system. Because the flaw allows direct access to files outside the intended web root, the primary impact is leakage of sensitive data, potentially compromising confidentiality of system files, credentials, or configuration information. The weakness is a classic path traversal issue, corresponding to CWE-22.
Affected Systems
The vulnerability applies to docuFORM Managed Print Service Client version 11.11c. No additional vendor or product details are provided, but the flaw resides in the client component that exposes an HTTP interface for print job management.
Risk and Exploitability
The CVSS score is 7.5. The EPSS score is <1%, indicating a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. These factors imply that the risk is uncertain, though the flaw allows local or remote parties who can reach the client’s URL space to retrieve files. The likely attack vector is via crafted HTTP requests directly to the Managed Print Service Client, requiring network access to the service endpoint.
