Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2018-4300 →

DEBIAN-CVE-2018-4300

The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 cups

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-1"}]}]

Debian:13 cups

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-1"}]}]

Debian:14 cups

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10-1"}]}]

Références

advisory security-tracker.debian.org