CVE-2023-27351

Published Apr 20, 2023

Last updated 2 months ago

web application

Server

Overview

AI description

Automated description summarized from trusted sources.

CVE-2023-27351 is an authentication bypass vulnerability affecting PaperCut NG and PaperCut MF print management solutions. The flaw resides within the `SecurityRequestFilter` class, stemming from an improper implementation of the authentication algorithm. This vulnerability allows remote attackers to bypass authentication on affected installations without requiring any prior credentials or user interaction. Successful exploitation can lead to unauthorized access to sensitive information, including user data such as usernames, full names, email addresses, and hashed passwords for internal PaperCut-created users.

Description: This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19226.
Source: zdi-disclosures@trendmicro.com
NVD status: Analyzed
Products: papercut_mf, papercut_ng

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

CVSS 3.0

Type: Secondary
Base score: 8.2
Impact score: 4.2
Exploitability score: 3.9
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Severity: HIGH

Weaknesses

zdi-disclosures@trendmicro.com: CWE-287

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "B754BD95-F7CC-4A77-A5FB-B627E1E636DB",
            "versionEndExcluding": "20.1.7",
            "versionStartIncluding": "15.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "7D231C34-F58C-4CA1-B158-64778AC17991",
            "versionEndExcluding": "21.2.11",
            "versionStartIncluding": "21.0.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "A326E88D-635E-4AC1-B5CE-455306FC9D55",
            "versionEndExcluding": "22.0.9",
            "versionStartIncluding": "22.0.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "BFB91DE7-FAEA-4F7D-B4B6-6B5211DE4AD0",
            "versionEndExcluding": "20.1.7",
            "versionStartIncluding": "15.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "4DE19845-02F0-4BB9-BECB-49B34FACB55D",
            "versionEndExcluding": "21.2.11",
            "versionStartIncluding": "21.0.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "C1852E7B-0B3F-4208-A26E-CB117E0C0CD8",
            "versionEndExcluding": "22.0.9",
            "versionStartIncluding": "22.0.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.