Lucene search
Piotr Bazydlo (@chudypb) of Trend Micro Zero Day InitiativeZDI-23-232HistoryMar 14, 2023 - 12:00 a.m.
PaperCut NG SecurityRequestFilter Authentication Bypass Vulnerability
2023-03-1400:00:00
Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative
www.zerodayinitiative.com
41
papercut
ng
securityrequestfilter
authentication
bypass
vulnerability
remote attackers
improper implementation
algorithm
system
0.03 Low
EPSS
Percentile
91.0%
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system.
Related
cvelist
cvelist
CVE-2023-27351
2023-04-20 00:00:00
cve
cve
CVE-2023-27351
2023-04-20 16:15:07
nessus
nessus
PaperCut MF SecurityRequestFilter Authentication Bypass (CVE-2023-27351)
2023-05-26 00:00:00
PaperCut NG SecurityRequestFilter Authentication Bypass (CVE-2023-27351)
2023-05-15 00:00:00
prion
prion
Authentication flaw
2023-04-20 16:15:00
nvd
nvd
CVE-2023-27351
2023-04-20 16:15:07
malwarebytes
malwarebytes
Update your PaperCut application servers now: Exploits in the wild
2023-04-26 04:00:00
Ransomware review: May 2023
2023-05-08 13:45:00
attackerkb
attackerkb
CVE-2023-27350
2023-04-20 00:00:00
rapid7blog
rapid7blog
thn
thn
CL0P's Ransomware Rampage - Security Measures for 2024
2024-04-09 11:24:00