PaperCut MF/NG Improper Access Control Vulnerability
PaperCut · MF/NG
Date added (CISA)
2023-04-21
Remediation due
2023-05-12
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code execution in the context of system.