The host is installed with PaperCut NG 8.0.0 through 19.2.7 or 20.0.0 through 20.1.6 or 21.0.0 through 21.2.10 or 22.0.0 through 22.0.8 and is prone to an improper access control vulnerability. A flaw is present in the application, which fails to properly handle issues in SetupCompleted class. On successful exploitation, an attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM.