CyberRota Analysis
AI-GeneratedThe authentication component of PaperCut NG/MF is vulnerable to a timing discrepancy that allows unauthenticated remote attackers to perform username enumeration by analyzing response times during login attempts. This vulnerability can lead to the exposure of valid usernames, increasing the risk of targeted attacks. Organizations using PaperCut NG/MF should prioritize addressing this issue to protect user account information and prevent potential unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a valid account is supplied, creating a measurable timing oracle that reveals account existence.