Medium severity6.5NVD Advisory· Published Feb 3, 2023· Updated Jun 17, 2026
CVE-2022-42909
CVE-2022-42909
Description
WEPA Print Away does not verify that a user has authorization to access documents before generating print orders and associated release codes. This could allow an attacker to generate print orders and release codes for documents they don´t own and print hem without authorization. In order to exploit this vulnerability, the user must have an account with wepanow.com or any of the institutions they serve, and be logged in.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:wepanow:print_away:-:*:*:*:*:*:*:*
(expand)+ 1 more
- (no CPE)
- (no CPE)range: not versioned
Patches
Vulnerability mechanics
References
2- enrique.wtf/CVE-2022-42909nvdThird Party Advisory
- www.incibe-cert.es/en/early-warning/security-advisories/multiple-vulnerabilities-wepa-print-awaynvdThird Party Advisory
News mentions
0No linked articles in our index yet.