CVE-2024-1221CWE-76

Improper access controls on APIs on Linux and macOS in PaperCut NG/MF

Low · published March 14, 2024

CVSS v3.1
3.1
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint. The attacker must carry out some reconnaissance to gain knowledge of a system token. This CVE only affects Linux and macOS PaperCut NG/MF servers.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00546 · 45.1th percentile
Weakness
CWE-76 · Improper Neutralization of Equivalent Special Elements
Published
2024-03-14T03:01Z
EPSS history
Timeline
  • 14 MAR 03:01Z
    Improper access controls on APIs on Linux and macOS in PaperCut NG/MF
    cvelistv5