PT-2019-6078 · Papercut · Papercut Ng+1

Published 2019-06-06 · Updated 2020-08-24 · CVE-2019-12135

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PaperCut MF and NG versions 18.3.8 and earlier PaperCut MF and NG versions 19.0.3 and earlier

Description The issue is related to an unspecified vulnerability in the application server of PaperCut MF and NG, which allows remote attackers to execute arbitrary code. This is due to errors in processing input data, potentially enabling an attacker to elevate their privileges.

Recommendations For versions 18.3.8 and earlier, update to a version later than 18.3.8 to resolve the issue. For versions 19.0.3 and earlier, update to a version later than 19.0.3 to resolve the issue. As a temporary workaround, consider restricting access to the application server to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2021-04743

CVE-2019-12135

Affected Products

Papercut Mf

Papercut Ng

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-12135 · Security Note
• https://papercut.com/products/mf/release-history · Vendor Advisory
• https://papercut.com/products/ng/release-history · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04743 · Security Note
• https://osv.dev/vulnerability/CVE-2019-12135 · Vendor Advisory
• https://vuldb.com/?id.136124 · Note