CVE-2023-27350: PaperCut MF/NG Improper Access Control Vulnerability
PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code execution in the context of system.
Other sources
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PaperCut NGto a version that resolves this vulnerability.Fixed in 22.0.5 (Build 63914)Patch ZDI-CAN-18987 - Compensating control
Restrict remote network access to the PaperCut NG setup/SetupCompleted functionality (since authentication is not required to exploit and the issue is in the SetupCompleted class) until the affected version is remediated.
Event History
Frequently Asked Questions
What is CVE-2023-27350?
CVE-2023-27350 is an improper access control vulnerability found in PaperCut MF/NG.
What is the impact of CVE-2023-27350?
The impact of CVE-2023-27350 is authentication bypass and code execution in the context of the system.
How does CVE-2023-27350 affect PaperCut MF/NG?
CVE-2023-27350 affects PaperCut MF/NG by allowing an attacker to bypass authentication and execute code on the system.
How can I fix CVE-2023-27350?
To fix CVE-2023-27350, apply the necessary security patches provided by PaperCut and ensure that you are running the latest version of PaperCut MF/NG.
Where can I find more information about CVE-2023-27350?
More information about CVE-2023-27350 can be found in the official knowledge base article provided by PaperCut: https://www.papercut.com/kb/Main/PO-1216-and-PO-1219