CVE-2012-6108: HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /va...

Security readout for executives and security teams

This is a local log-integrity issue in older HPLIP versions. On affected Linux systems, HP printing software created HP log directories with permissions that allowed any local user to remove HP log files. The main business risk is loss of troubleshooting or audit evidence, not remote compromise. Exposure is likely limited to Linux endpoints or print servers running HPLIP before 3.13.2, especially systems where local shell users exist. The affected product metadata in the bundle is incomplete, so confirm against installed packages and distro advisories. Handle during routine Linux endpoint and print-server maintenance unless the environment relies on HP logs for investigations or has many shared local-user systems. Prioritize faster if log integrity is operationally important. Mitigation focus: Upgrade HPLIP to 3.13.2 or a vendor-fixed later package.; Check vendor or distribution advisories for backported fixes.; Ensure HP log directories are not world-writable..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.