CVE-2023-6006

This vulnerability potentially allows local attackers to escalate privileges on affected installations of PaperCut NG. An attacker must have local write access to the C Drive. In addition, Print Archiving must be enabled or the attacker needs to encounter a misconfigured system. This vulnerability does not apply to PaperCut NG installs that have Print Archiving enabled and configured as per the recommended set up procedure. This specific flaw exists within the pc-pdl-to-image process. The process loads an executable from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM Note: This CVE has been rescored with a "Privileges Required (PR)" rating of low, and “Attack Complexity (AC)” rating of low, reflecting the worst-case scenario where an Administrator has granted local login access to standard network users on the host server.

• CWE-250

• https://www.papercut.com/kb/Main/Security-Bulletin-November-2023/Vendor Advisory
• https://www.papercut.com/kb/Main/CommonSecurityQuestions/
• https://www.papercut.com/kb/Main/Security-Bulletin-November-2023/Vendor Advisory

Published

Nov 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5999Rejected reason: This is a duplicate.
• CVE-2023-6000The Popup Builder WordPress plugin before 4.2.3 does not pre…6.1
• CVE-2023-6001Prometheus metrics are available without authentication. The…7.5
• CVE-2023-6002YugabyteDB is vulnerable to cross site scripting (XSS) via l…6.1
• CVE-2023-6004A flaw was found in libssh. By utilizing the ProxyCommand or…4.8
• CVE-2023-6005The EventON WordPress plugin before 4.5.5, EventON WordPress…4.8
• CVE-2023-6007The UserPro plugin for WordPress is vulnerable to unauthoriz…6.5
• CVE-2023-6008The UserPro plugin for WordPress is vulnerable to Cross-Site…4.3
• CVE-2023-6009The UserPro plugin for WordPress is vulnerable to privilege …8.8
• CVE-2023-6010Rejected reason: Accidental Request.
• CVE-2023-6011Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2023-6012An improper input validation vulnerability has been found in…9.8