CVE-2018-4300

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2018-4300

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-4300.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-4300

Related

Published

2019-04-03T18:29:06Z

Modified

2025-02-19T02:37:43.101078Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.

References

Affected packages

Debian:11 / cups

Package

Name: cups
Purl: pkg:deb/debian/cups?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.10-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / cups

Package

Name: cups
Purl: pkg:deb/debian/cups?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.10-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / cups

Package

Name: cups
Purl: pkg:deb/debian/cups?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.10-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/apple/cups

Affected ranges

Type: GIT
Repo: https://github.com/apple/cups
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

25b2338346ef3abbb93ea88476887cba7b2b86f8

Affected versions

v2.*

v2.2.0

v2.2.1

v2.2.2

v2.2.3

v2.2.4

v2.2.5

v2.2.6

v2.2.7

v2.2.8

v2.2b1

v2.2b2

v2.2rc1