Lucene search

K
zdiAnonymousZDI-24-782
HistoryJun 18, 2024 - 12:00 a.m.

PaperCut NG PrintDeployProxyController Incorrect Authorization Authentication Bypass Vulnerability

2024-06-1800:00:00
Anonymous
www.zerodayinitiative.com
vulnerability
papercut ng
printdeployproxycontroller
authentication bypass

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.0%

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PrintDeployProxyController class. The issue results from the incorrect authorization. An attacker can leverage this vulnerability to bypass authentication on the system.

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.0%

Related for ZDI-24-782