ZDI-CAN-20972: ZDI-24-1038: PaperCut NG pc-web-print Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of PaperCut NG Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-3037.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-20972?
ZDI-CAN-20972 has been assigned a CVSS rating indicating a high severity due to its potential for privilege escalation.
How does ZDI-CAN-20972 affect PaperCut NG Server?
ZDI-CAN-20972 allows local attackers to escalate their privileges on affected installations of PaperCut NG Server.
What are the prerequisites to exploit ZDI-CAN-20972?
An attacker must obtain the ability to execute low-privileged code on the target system to exploit ZDI-CAN-20972.
How can I protect my system from ZDI-CAN-20972?
To protect your system, ensure that your PaperCut NG Server is updated to the latest version that addresses the ZDI-CAN-20972 vulnerability.
Is there a workaround for ZDI-CAN-20972?
Currently, there are no official workarounds for ZDI-CAN-20972; updating the software is the recommended approach.