CVE-2023-4568: PaperCut NG Unauthenticated XMLRPC
Published Sep 13, 2023
·Updated
PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.
Affected Software
1 affected component
PaperCut PaperCut NG<=22.0.12
Event History
Sep 13, 2023
CVE Published
via MITRE·08:28 PM
Data Sourced
via MITRE·08:28 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-4568?
CVE-2023-4568 is a vulnerability in PaperCut NG that allows for unauthenticated XMLRPC commands to be run by default.
2
Which versions of PaperCut NG are affected by CVE-2023-4568?
Versions 22.0.12 and below of PaperCut NG are confirmed to be affected by CVE-2023-4568.
3
Are later versions of PaperCut NG affected by CVE-2023-4568?
Later versions of PaperCut NG may also be affected by CVE-2023-4568 due to lack of a vendor supplied patch.
4
What is the severity of CVE-2023-4568?
CVE-2023-4568 has a severity rating of medium with a CVSS score of 6.5.
5
How can I fix CVE-2023-4568?
To fix CVE-2023-4568, it is recommended to apply the vendor supplied patch if available or upgrade to a version that is not affected.