- Vendor / Project
- PaperCut
- Product
- MF/NG
- Date added
- Apr 21, 2023
- Due date
- May 12, 2023
- Known ransomware use
- Known
- CWEs
- CWE-284
Description
PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code execution in the context of system.
Required action
Apply updates per vendor instructions.