PaperCut NG/MF Authentication Bypass

PaperCut NG/MF is a print management system designed to help organizations monitoring and controlling print resources while providing an easy-to-use solution to their end users. PaperCut NG/MF versions below 20.1.7, 21.x below 21.2.11 and 22.x below 22.0.9 are affected by an authentication bypass...

PaperCut authentication bypass

Added: 05/12/2023 Background PaperCut is print management software. It includes a web interface written in Java. Problem An authentication bypass vulnerability in the SetupCompleted class allows a remote, unauthenticated attacker to execute arbitrary code in the context of SYSTEM. Resolution...

The vulnerability of the SetupCompleted class in printing control software such as PaperCut MF and PaperCut NG allows a perpetrator to execute arbitrary code.

The vulnerability of the SetupCompleted class in printing control software such as PaperCut MF and PaperCut NG is related to errors in access management. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code in the SYSTEM context remotely...

PaperCut MF/NG Improper Access Control Vulnerability

PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code execution in the context of system...

CVE-2023-27350

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. ...

CVE-2023-27350

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. ...

VulnCheck KEV: CVE-2023-27350

PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code execution in the context of system...