← CVE Intelligence

CVE-2024-1222

Incorrect authorization controls in PaperCut NG/MF APIs PUBLISHED

Description (CNA)

This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut NG/MF API calls.

Affected (CNA)

Vendor / productVersions
PaperCut / PaperCut NG, PaperCut MFaffected 0 before 23.0.7; affected 0 before 22.1.5; affected 0 before 21.2.14; affected 0 before 20.1.10

CWE

CWE-250

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.