CVE-2023-27351

Published Apr 20, 2023

Last updated a day ago

CVSS high 7.5

Overview

Description: This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19226.
Source: zdi-disclosures@trendmicro.com
NVD status: Analyzed
Products: papercut_mf, papercut_ng

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

CVSS 3.0

Type: Secondary
Base score: 8.2
Impact score: 4.2
Exploitability score: 3.9
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Severity: HIGH

Weaknesses

zdi-disclosures@trendmicro.com: CWE-287

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 4

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "B754BD95-F7CC-4A77-A5FB-B627E1E636DB",
            "versionEndExcluding": "20.1.7",
            "versionStartIncluding": "15.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "7D231C34-F58C-4CA1-B158-64778AC17991",
            "versionEndExcluding": "21.2.11",
            "versionStartIncluding": "21.0.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "A326E88D-635E-4AC1-B5CE-455306FC9D55",
            "versionEndExcluding": "22.0.9",
            "versionStartIncluding": "22.0.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "BFB91DE7-FAEA-4F7D-B4B6-6B5211DE4AD0",
            "versionEndExcluding": "20.1.7",
            "versionStartIncluding": "15.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "4DE19845-02F0-4BB9-BECB-49B34FACB55D",
            "versionEndExcluding": "21.2.11",
            "versionStartIncluding": "21.0.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "C1852E7B-0B3F-4208-A26E-CB117E0C0CD8",
            "versionEndExcluding": "22.0.9",
            "versionStartIncluding": "22.0.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.