This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987.

PaperCut NG/MF is a print management system designed to help organizations monitoring and controlling print resources while providing an easy-to-use solution to their end users. PaperCut NG/MF versions below 20.1.7, 21.x below 21.2.11 and 22.x below 22.0.9 are affected by an authentication bypass vulnerability in the `SetupCompleted` class. By leveraging this vulnerability, a remote and unauthenticated attacker could log on as an administration and perform remote code execution on the target PaperCut instance.

The PaperCut MF running on the remote host is affected by an authentication bypass vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted message, to bypass access control to login as the administrative user.

The PaperCut NG running on the remote host is affected by an authentication bypass vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted message, to bypass access control to login as the administrative user.

ID	Name	Product	Family	Severity
113932	PaperCut NG/MF Authentication Bypass	Web App Scanning	Component Vulnerability	critical
176036	PaperCut MF Authentication Bypass (CVE-2023-27350)	Nessus	CGI abuses	critical
174747	PaperCut NG Authentication Bypass (CVE-2023-27350)	Nessus	CGI abuses	critical

Detections

Analytics

CVE-2023-27350

critical

Tenable Plugins

critical

critical

critical