CVE-2018-17210

An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass the session checks (that would otherwise logout a low-privileged user) by calling the core print job components directly via crafted HTTP GET and POST requests.

• CWE-285

• https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17210-Authorization_Bypass-PrinterOnExploit, Third Party Advisory
• https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17210-Authorization_Bypass-PrinterOnExploit, Third Party Advisory

Published

Jul 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17204An issue was discovered in Open vSwitch (OvS) 2.7.x through …4.3
• CVE-2018-17205An issue was discovered in Open vSwitch (OvS) 2.7.x through …
• CVE-2018-17206An issue was discovered in Open vSwitch (OvS) 2.7.x through …4.9
• CVE-2018-17207An issue was discovered in Snap Creek Duplicator before 1.2.…9.8
• CVE-2018-17208Linksys Velop 1.1.2.187020 devices allow unauthenticated com…
• CVE-2018-1721IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML Ex…8.8
• CVE-2018-17211An issue was discovered in PrinterOn Central Print Services …
• CVE-2018-17213An issue was discovered in PrinterOn Central Print Services …
• CVE-2018-17215An information-disclosure issue was discovered in Postman th…
• CVE-2018-17216An issue was discovered in PTC ThingWorx Platform 6.5 throug…
• CVE-2018-17217An issue was discovered in PTC ThingWorx Platform 6.5 throug…
• CVE-2018-17218An issue was discovered in PTC ThingWorx Platform 6.5 throug…5.4