{"api_version":"1","generated_at":"2026-07-23T12:52:18+00:00","cve":"CVE-2022-25090","urls":{"html":"https://cve.report/CVE-2022-25090","api":"https://cve.report/api/cve/CVE-2022-25090.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-25090","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-25090"},"summary":{"title":"CVE-2022-25090","description":"Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privilege escalation because of a race condition.","state":"PUBLISHED","assigner":"mitre","published_at":"2022-03-10 17:47:00","updated_at":"2026-07-09 01:17:19"},"problem_types":["CWE-362","n/a"],"metrics":[{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"8.1","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://packetstormsecurity.com/files/167012/Printix-1.3.1106.0-Privilege-Escalation.html","name":"http://packetstormsecurity.com/files/167012/Printix-1.3.1106.0-Privilege-Escalation.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Printix 1.3.1106.0 Privilege Escalation ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://packetstormsecurity.com/files/166242/Printix-Client-1.3.1106.0-Privilege-Escalation.html","name":"http://packetstormsecurity.com/files/166242/Printix-Client-1.3.1106.0-Privilege-Escalation.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"title":"Printix Client 1.3.1106.0 Privilege Escalation ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.exploit-db.com/exploits/50812","name":"https://www.exploit-db.com/exploits/50812","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"title":"Printix Client 1.3.1106.0 - Privilege Escalation - Windows local Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/ComparedArray/printix-CVE-2022-25090","name":"https://github.com/ComparedArray/printix-CVE-2022-25090","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"GitHub - ComparedArray/printix-CVE-2022-25090: A \"Creation of Temporary Files in Directory with Insecure Permissions\" vulnerability in PrintixService.exe, in Printix's \"Printix Secure Cloud Print Management\", Version 1.3.1106.0 and below allows any logged in user to elevate any executable or file to the SYSTEM context. This is achieved by exploiting race conditions in the Installer.","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://printix.com","name":"http://printix.com","refsource":"MITRE","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"https://printix.net/","name":"MISC:https://printix.net/","refsource":"MITRE","tags":[],"title":"Secure Cloud Print Management Software – Serverless and Easy - Printix","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25090","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25090","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"25090","vulnerable":"1","versionEndIncluding":"1.3.1106.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"kofax","cpe5":"printix","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2022","cve_id":"25090","cve":"CVE-2022-25090","epss":"0.110110000","percentile":"0.953850000","score_date":"2026-07-12","updated_at":"2026-07-13 00:07:38"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2026-07-09T00:17:34.211Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.exploit-db.com/exploits/50812"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/166242/Printix-Client-1.3.1106.0-Privilege-Escalation.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/ComparedArray/printix-CVE-2022-25090"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/167012/Printix-1.3.1106.0-Privilege-Escalation.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privilege escalation because of a race condition."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2026-07-05T00:05:30.975Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"url":"https://www.exploit-db.com/exploits/50812"},{"url":"http://packetstormsecurity.com/files/166242/Printix-Client-1.3.1106.0-Privilege-Escalation.html"},{"url":"https://github.com/ComparedArray/printix-CVE-2022-25090"},{"url":"http://packetstormsecurity.com/files/167012/Printix-1.3.1106.0-Privilege-Escalation.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2022-25090","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privilege escalation because of a race condition."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://printix.com","refsource":"MISC","url":"http://printix.com"},{"name":"https://www.exploit-db.com/exploits/50812","refsource":"MISC","url":"https://www.exploit-db.com/exploits/50812"},{"name":"http://packetstormsecurity.com/files/166242/Printix-Client-1.3.1106.0-Privilege-Escalation.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/166242/Printix-Client-1.3.1106.0-Privilege-Escalation.html"},{"name":"https://github.com/ComparedArray/printix-CVE-2022-25090","refsource":"MISC","url":"https://github.com/ComparedArray/printix-CVE-2022-25090"},{"name":"http://packetstormsecurity.com/files/167012/Printix-1.3.1106.0-Privilege-Escalation.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/167012/Printix-1.3.1106.0-Privilege-Escalation.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2022-25090","datePublished":"2022-03-09T15:36:48.000Z","dateReserved":"2022-02-14T00:00:00.000Z","dateUpdated":"2026-07-09T00:17:34.211Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2022-03-10 17:47:00","lastModifiedDate":"2026-07-09 01:17:19","problem_types":["CWE-362","n/a"],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kofax:printix:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.1106.0","matchCriteriaId":"0FC2CF4F-58C1-4A57-BE07-D8CEA90F53C8"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2022","CveId":"25090","Ordinal":"1","Title":"CVE-2022-25090","CVE":"CVE-2022-25090","Year":"2022"},"notes":[{"CveYear":"2022","CveId":"25090","Ordinal":"1","NoteData":"Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privilege escalation because of a race condition.","Type":"Description","Title":"CVE-2022-25090"}]}}}