ZDI-23-1798: PaperCut NG Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of PaperCut NG. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2023-6006.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1798?
The severity of ZDI-23-1798 is rated at a CVSS score of 7.0.
How do I fix ZDI-23-1798?
To fix ZDI-23-1798, update PaperCut NG to the latest version that includes the security patches addressing this vulnerability.
Who is affected by ZDI-23-1798?
ZDI-23-1798 affects installations of PaperCut NG where local attackers are able to execute low-privileged code.
What type of vulnerability is ZDI-23-1798?
ZDI-23-1798 is a privilege escalation vulnerability that allows local attackers to gain elevated rights on affected systems.
What must an attacker do to exploit ZDI-23-1798?
An attacker must first have the ability to execute low-privileged code on the target system to exploit ZDI-23-1798.