First published: Wed Jul 31 2024(Updated: )
This vulnerability allows local attackers to escalate privileges on affected installations of PaperCut NG Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-3037.
Affected Software | Affected Version | How to fix |
---|---|---|
PaperCut NG |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ZDI-CAN-20972 has been assigned a CVSS rating indicating a high severity due to its potential for privilege escalation.
ZDI-CAN-20972 allows local attackers to escalate their privileges on affected installations of PaperCut NG Server.
An attacker must obtain the ability to execute low-privileged code on the target system to exploit ZDI-CAN-20972.
To protect your system, ensure that your PaperCut NG Server is updated to the latest version that addresses the ZDI-CAN-20972 vulnerability.
Currently, there are no official workarounds for ZDI-CAN-20972; updating the software is the recommended approach.