Vulnerability Description
An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and prevent the service from operating as expected.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Papercut | Papercut Mf | < 22.1.3 |
| Papercut | Papercut Ng | < 22.1.3 |
Related Weaknesses (CWE)
References
- https://www.papercut.com/kb/Main/SecurityBulletinJuly2023/Vendor Advisory
- https://www.tenable.com/security/research/tra-2023-23Third Party Advisory
- https://www.papercut.com/kb/Main/SecurityBulletinJuly2023/Vendor Advisory
- https://www.tenable.com/security/research/tra-2023-23Third Party Advisory
FAQ
What is CVE-2023-3486?
CVE-2023-3486 is a vulnerability with a CVSS score of 8.2 (HIGH). An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This cou...
How severe is CVE-2023-3486?
CVE-2023-3486 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-3486?
Check the references section above for vendor advisories and patch information. Affected products include: Papercut Papercut Mf, Papercut Papercut Ng.