Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2c69-r2jh-xjvm

Опубликовано: 20 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19226.

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19226.

EPSS

Процентиль: 84%
0.02237
Низкий

8.2 High

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 7.5
nvd
больше 2 лет назад

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19226.

CVSS3: 8.2
fstec
больше 2 лет назад

Уязвимость класса SecurityRequestFilter программных средств контроля за печатью в сети PaperCut MF и PaperCut NG, позволяющая нарушителю получить доступ к учётным данным пользователей

EPSS

Процентиль: 84%
0.02237
Низкий

8.2 High

CVSS3

Дефекты

CWE-287