Lucene search
AnonymousZDI-23-233HistoryMar 14, 2023 - 12:00 a.m.
PaperCut NG SetupCompleted Improper Access Control Authentication Bypass Vulnerability
2023-03-1400:00:00
Anonymous
www.zerodayinitiative.com
188
papercut ng
setup completed
improper access control
authentication bypass
vulnerability
remote attackers
arbitrary code
system
class
improper access control
EPSS
0.97
Percentile
99.8%
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM.
Related
trendmicroblog
trendmicroblog
Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation
2023-04-26 00:00:00
talosblog
talosblog
cvelist
cvelist
CVE-2023-27350
2023-04-20 00:00:00
exploitdb
exploitdb
PaperCut NG/MG 22.0.4 - Remote Code Execution (RCE)
2023-05-23 00:00:00
PaperCut NG/MG 22.0.4 - Authentication Bypass
2023-04-25 00:00:00
zdt
zdt
PaperCut PaperCutNG Authentication Bypass Exploit
2023-06-07 00:00:00
PaperCut NG/MG 22.0.4 - Remote Code Execution Exploit
2023-05-23 00:00:00
PaperCut NG/MG 22.0.4 - Authentication Bypass Exploit
2023-04-25 00:00:00
nvd
nvd
CVE-2023-27350
2023-04-20 16:15:07
packetstorm
packetstorm
PaperCut PaperCutNG Authentication Bypass
2023-06-07 00:00:00
PaperCut NG/MG 22.0.4 Remote Code Execution
2023-05-24 00:00:00
PaperCut NG/MG 22.0.4 Authentication Bypass
2023-04-26 00:00:00
githubexploit
githubexploit
Exploit for Improper Access Control in Papercut Papercut Mf
2023-05-27 11:32:35
Exploit for Improper Access Control in Papercut Papercut Ng
2023-08-04 08:18:48
Exploit for Improper Access Control in Papercut Papercut Mf
2023-04-21 09:19:13
cisa_kev
cisa_kev
PaperCut MF/NG Improper Access Control Vulnerability
2023-04-21 00:00:00
thn
thn
ics
ics
Malicious Actors Exploit CVE-2023-27350 in PaperCut MF and NG
2023-05-11 12:00:00
Understanding Ransomware Threat Actors: LockBit
2023-06-14 12:00:00
nessus
nessus
PaperCut MF Authentication Bypass (CVE-2023-27350)
2023-05-18 00:00:00
PaperCut NG Authentication Bypass (CVE-2023-27350)
2023-04-25 00:00:00
prion
prion
Authentication flaw
2023-04-20 16:15:00
saint
saint
PaperCut authentication bypass
2023-05-12 00:00:00
PaperCut authentication bypass
2023-05-12 00:00:00
metasploit
metasploit
PaperCut PaperCutNG Authentication Bypass
2023-04-25 23:00:33
cve
cve
CVE-2023-27350
2023-04-20 16:15:07
nuclei
nuclei
PaperCut - Unauthenticated Remote Code Execution
2023-04-25 14:03:38
malwarebytes
malwarebytes
Ransomware review: May 2023
2023-05-08 13:45:00
Update your PaperCut application servers now: Exploits in the wild
2023-04-26 04:00:00
rapid7blog
rapid7blog
CVE-2023-27350: Ongoing Exploitation of PaperCut Remote Code Execution Vulnerability
2023-05-17 18:35:01
Metasploit Weekly Wrap-Up
2023-06-09 22:02:27
What’s New in InsightVM and Nexpose: Q2 2023 in Review
2023-06-29 13:00:00
attackerkb
attackerkb
CVE-2023-27350
2023-04-20 00:00:00
qualysblog
qualysblog
Qualys Survey of Top 10 Exploited Vulnerabilities in 2023
2023-09-26 13:04:00
2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is
2023-12-19 15:00:00
securelist
securelist
IT threat evolution in Q2 2023. Non-mobile statistics
2023-08-30 10:00:41