Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-4568

PaperCut NG Unauthenticated XMLRPC

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tenable

Description

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PaperCut PaperCut NG

Default version status: unaffected

  • 0unknown

References