CVE-2023-4568

Summary

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.

Affected Software

Weaknesses

• CWE-287: CWE-287 Improper Authentication

ADP Enrichment

CVE Program Container

Additional References

• https://www.tenable.com/security/research/tra-2023-31

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.tenable.com/security/research/tra-2023-31

• ←Previous
• Next→