CVE-2018-4300

medium

Description

The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.

References

https://lists.debian.org/debian-lts-announce/2019/09/msg00028.html

https://github.com/apple/cups/releases/tag/v2.2.10

http://www.securityfocus.com/bid/107785

Details

Source: Mitre, NVD

Published: 2019-04-03

Updated: 2019-09-28

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.9

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N