CVE-2024-1221: Improper access controls on APIs on Linux and macOS in PaperCut NG/MF

Q: What is the severity of CVE-2024-1221?

CVE-2024-1221 has been classified as a medium severity vulnerability.

Q: How do I fix CVE-2024-1221?

To fix CVE-2024-1221, update your PaperCut NG/MF to the latest version that addresses this vulnerability.

Q: Which versions are affected by CVE-2024-1221?

CVE-2024-1221 affects certain versions of PaperCut NG/MF up to 23.0.7 for both Linux and macOS.

Q: What impact does CVE-2024-1221 have on my PaperCut server?

CVE-2024-1221 may expose files on a PaperCut NG/MF server if exploited through a specifically crafted payload.

Q: Is CVE-2024-1221 present on Windows installations of PaperCut?

No, CVE-2024-1221 specifically affects Linux and macOS installations of PaperCut, not Windows.

Published Mar 14, 2024

Updated

This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint. The attacker must carry out some reconnaissance to gain knowledge of a system token. This CVE only affects Linux and macOS PaperCut NG/MF servers.

Affected Software

11 affected components

PaperCut NG/MF

All of the following

Any of the following

PaperCut PaperCut MF<20.1.10

PaperCut PaperCut MF>=21.0.0<21.2.14

PaperCut PaperCut MF>=22.0.0<22.1.5

PaperCut PaperCut MF>=23.0.1<23.0.7

PaperCut PaperCut NG<20.1.10

PaperCut PaperCut NG>=21.0.0<21.2.14

PaperCut PaperCut NG>=22.0.0<22.1.5

PaperCut PaperCut NG>=23.0.1<23.0.7

Any of the following

Apple macOS

Linux Linux kernel

Event History

Mar 14, 2024

CVE Published

via MITRE·03:01 AM

Data Sourced

via MITRE·03:01 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-1221?

CVE-2024-1221 has been classified as a medium severity vulnerability.

How do I fix CVE-2024-1221?

To fix CVE-2024-1221, update your PaperCut NG/MF to the latest version that addresses this vulnerability.

Which versions are affected by CVE-2024-1221?

CVE-2024-1221 affects certain versions of PaperCut NG/MF up to 23.0.7 for both Linux and macOS.

What impact does CVE-2024-1221 have on my PaperCut server?

CVE-2024-1221 may expose files on a PaperCut NG/MF server if exploited through a specifically crafted payload.

Is CVE-2024-1221 present on Windows installations of PaperCut?