The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade cups | Sep 30, 2019 | Apr 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade cupsUpgrade cups-develUpgrade cups-clientUpgrade cups-lpdUpgrade cups-filesystemUpgrade cups-libs | May 30, 2019 | Apr 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cupsUpgrade cups-develUpgrade cups-filesystemUpgrade cups-clientUpgrade cups-lpdUpgrade cups-libs | May 30, 2019 | Apr 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cups-develUpgrade cups-filesystemUpgrade cups-lpdUpgrade cupsUpgrade cups-clientUpgrade cups-libs | May 30, 2019 | Apr 3, 2019 |
| Redhat_linux | — | No solution existsUpgrade cups-develUpgrade cups-lpdUpgrade cupsUpgrade cups-filesystemUpgrade cups-ipptoolUpgrade cups-clientUpgrade cups-libsUpgrade cups-debuginfo | Aug 31, 2020 | Apr 3, 2019 |
| Ubuntu | — | Upgrade cups | Nov 19, 2024 | Apr 3, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub