PaperCut ships second patch as attackers hijack user lookup to dump database tables
PaperCut issued a second emergency patch for its NG and MF products as attackers pursued a data-theft path distinct from the documented remote-code-execution chain.
By RuntimeWire Staff · Published
Primary source: BleepingComputer
Why it matters
Attackers can repurpose PaperCut's authentication bypass for database theft, while the two disclosed flaws also provide a path to remote code execution. PaperCut has published investigation guidance and recommends rebuilding suspected servers from a clean backup.
PaperCut Software co-founders Chris Dance and Matt Doran started with abandoned school printouts. Attackers are now abusing an authentication bypass in their print-management software to hijack its external user-lookup function and dump database tables.…