Print management outfit PaperCut is under 0-day attack, and it’s drawing customers’ blood

The fix is either an unvalidated and unofficial emergency patch or taking the server offline

Nothing smarts like a paper cut, but being attacked after leaving an application’s web interface exposed to the internet might be just as painful.

Such attacks are the risk to which users of PaperCut print management software find themselves exposed today, after the company revealed a university’s security teams alerted it to an attack.

The company analyzed info provided by the university and found a vulnerability in its PaperCut NG and PaperCut MF products, which manage access to printers, track use, and enable printing from myriad client devices.

“We are aware of confirmed customer incidents and are treating this matter with the highest priority,” states an urgent security advisory issued on Thursday.

Unusually, the advisory is silent on the nature of the flaw and the risk it poses.

It looks like the web interface to...

Copyright of this story solely belongs to theregister.com. To see the full text click HERE