CVE-2023-27350PaperCut MF/NG Improper Access Control Vulnerability
Aktif olarak istismar ediliyor — PaperCut MF/NG Improper Access Control Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını 21.04.2023 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 12.05.2023.
Gerekli işlem: Apply updates per vendor instructions. https://www.papercut.com/kb/Main/PO-1216-and-PO-1219; https://nvd.nist.gov/vuln/detail/CVE-2023-27350
Açıklama
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| PaperCut | NG | 22.0.5 (Build 63914) | |
| papercut | papercut mf | 8.0 – < 20.1.7 | |
| papercut | papercut ng | 8.0 – < 20.1.7 |
Kaynaklar ve yamalar
- https://www.zerodayinitiative.com/advisories/ZDI-23-233/ Third Party AdvisoryVDB Entry
- https://www.papercut.com/kb/Main/PO-1216-and-PO-1219 Vendor Advisory
- http://packetstormsecurity.com/files/171982/PaperCut-MF-NG-Authentication-Bypass-Remote-Code-Execution.html Third Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/172022/PaperCut-NG-MG-22.0.4-Authentication-Bypass.html ExploitThird Party AdvisoryVDB Entry
- https://news.sophos.com/en-us/2023/04/27/increased-exploitation-of-papercut-drawing-blood-around-the-internet/ Third Party Advisory
- http://packetstormsecurity.com/files/172512/PaperCut-NG-MG-22.0.4-Remote-Code-Execution.html ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/172780/PaperCut-PaperCutNG-Authentication-Bypass.html ExploitThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27350 US Government Resource
CPE eşleşmeleri (NVD) (6)
cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*≥ 8.0 < 20.1.7cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*≥ 21.0.0 < 21.2.11cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*≥ 22.0.0 < 22.0.9cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*≥ 8.0 < 20.1.7cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*≥ 21.0.0 < 21.2.11cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*≥ 22.0.0 < 22.0.9