KLA10291 Multiple vulnerabilities in PaperCut

Multiple serious vulnerabilities have been found in PaperCut. Malicious users can exploit these vulnerabilities to cause denial of service or hijack administrators auth. Below is a complete list of vulnerabilities

1. A CSRF vulnerability can be exploited remotely via unspecified vectors;
2. An unspecified vulnerability can be exploited by unknown vectors.

Original advisories

Release notes

Related products

PaperCut

CVE list

CVE-2014-2659 high

CVE-2014-2658 critical

Solution

Update to latest version

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• PaperCut MF & NG versions 14.1 build 26830 and earlier