Intrusion PreventionPaperCut.NG.FileUploadAuthentication.Authentication.Bypass
Description
This indicates an attack attempt to exploit an Authentication Bypass Vulnerability in PaperCut PaperCut NG.
This vulnerability is due to an authentication bypass in FileUploadAuthenticationFilter class. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successfully exploiting this vulnerability could result in unauthenticated file upload and lead to possible denial of service conditions.
Affected Products
PaperCut PaperCut MF prior to 22.1.3
PaperCut PaperCut NG prior to 22.1.3
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.papercut.com/kb/Main/SecurityBulletinJuly2023/
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 53815 |
| Created | Sep 26, 2023 |
| Updated | Nov 18, 2023 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 2.08% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |
| Profile Type | Permission/Privilege/Access Control |