HP MFP Digital Sending Software 4.9x <= 4.91.21 Local Workflow Metadata Information Disclosure
Low Nessus Plugin ID 56651
SynopsisThe remote Windows host contains an application affected by a local information disclosure vulnerability.
DescriptionThe remote Windows host contains a version of HP MFP Digital Sending Software version 4.9x that's 4.91.21 or earlier. It is reportedly affected by a local information disclosure vulnerability that could result in disclosure of personal information in workflow metadata.
SolutionInstall HP MFP Digital Sending Software version 4.20.
Note that, while 4.9x represents a re-architecture of HP MFP Digital Signing Software 4.20 to enable support for FutureSmart devices, the only fix HP currently provides is to move to 4.20 from the 4.9x release branch.