CVE-2023-4568 - PaperCut NG Unauthenticated XMLRPC

Back Back to CVE browser

MEDIUM

PaperCut NG Unauthenticated XMLRPC

Published Sep 13, 2023

6.5

MEDIUM

CVSS 3.1

EPSS 3.89%

Description

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54423
Advisory
https://www.tenable.com/security/research/tra-2023-31
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54423		Advisory
https://www.tenable.com/security/research/tra-2023-31		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner tenable

Published Sep 13, 2023

Updated Sep 25, 2024

Reserved Aug 28, 2023

Link CVE-2023-4568

CISA Vulnrichment

Updated Sep 25, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-4568

Red Hat

No data

ENISA EUVD

Assigner tenable

Published Sep 13, 2023

Updated Sep 25, 2024

Link EUVD-2023-54423

GitHub

No data