PT-2019-6078 · Papercut · Papercut Ng+1

Publicado 2019-06-06 · Atualizado 2020-08-24 · CVE-2019-12135

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PaperCut MF and NG versions 18.3.8 and earlier PaperCut MF and NG versions 19.0.3 and earlier

Description The issue is related to an unspecified vulnerability in the application server of PaperCut MF and NG, which allows remote attackers to execute arbitrary code. This is due to errors in processing input data, potentially enabling an attacker to elevate their privileges.

Recommendations For versions 18.3.8 and earlier, update to a version later than 18.3.8 to resolve the issue. For versions 19.0.3 and earlier, update to a version later than 19.0.3 to resolve the issue. As a temporary workaround, consider restricting access to the application server to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2021-04743

CVE-2019-12135

Produtos afetados

Papercut Mf

Papercut Ng

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-12135 · Nota de Segurança
• https://papercut.com/products/mf/release-history · Aviso do Fabricante
• https://vuldb.com/?id.136124 · Nota
• https://papercut.com/products/ng/release-history · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2021-04743 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-12135 · Aviso do Fabricante