cups has Authentication bypass with AuthType Negotiate
Résumé
cups has Authentication bypass with AuthType Negotiate
Description d'origine
La description telle que publiée par la source (souvent en anglais).
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the AuthType is set to anything but Basic, if the request contains an Authorization: Basic ... header, the password is not checked. This results in authentication bypass. Any configuration that allows an AuthType that is not Basic is affected. Version 2.4.13 fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2025-58060 cups Corrigé dans: 2.4.16-r0
- Debian DEBIAN-CVE-2025-58060 cups Corrigé dans: 2.3.3op2-3+deb11u10
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web openwall.com
- web lists.debian.org