CVE-2018-4300

The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.

Score

CVSS 3.0 5.9 Medium

Status

Modified - product-security@apple.com

Published

2019-04-03

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Cups (Apple)

References

• http://www.securityfocus.com/bid/107785
• https://github.com/apple/cups/releases/tag/v2.2.10
• https://lists.debian.org/debian-lts-announce/2019/09/msg00028.html