Type Vulnerability
PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class.
PaperCut · Auth bypass
Partial or cachedPaperCut NG/MF Authentication Bypass Vulnerability
CVE-2023-27351
What this means
This is rated high severity (7.5 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Papercut Papercut Mf and Papercut Papercut Ng are in your estate, and treat that as the priority.
Full vendor description
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19226.
Scoring and exploitation
7.5/ 10
CVSS 3.1 base scoreHigh
Exploitable over the network without any account, and no one has to click or open anything. High impact on confidentiality.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability
Longer bar: easier to attack
Attack vectorNetworkAV:N
Attack complexityLowAC:L
Privileges requiredNonePR:N
User interactionNoneUI:N
ScopeUnchangedS:U
Impact
Longer bar: more harm
ConfidentialityHighC:H
IntegrityNoneI:N
AvailabilityNoneA:N
- Elevated attack likelihood (~78.1% in 30 days)Model estimate (): a probability signal, not confirmed exploitation
- Exploited in the wild
- Yes — confirmed exploitation (US CISA )
- Known
- Listed product
- PaperCut NG/MF
Weaknesses
CWE-287
Affected products ()
- Papercut Papercut Mf
- Papercut Papercut Ng
Show the raw CPE strings (2)
- cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*
- cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*
References
5 links from the CVE record, grouped by site; the vendor's advisory comes first.
papercut.com1 linkVendor advisory
- PO-1216-and-PO-1219 (opens in a new tab)Vendor Advisory
zerodayinitiative.com1 link
- ZDI-23-232 (opens in a new tab)Third Party Advisory · VDB Entry
cisa.gov1 link
- known-exploited-vulnerabilities-catalog (opens in a new tab)US Government Resource