Wind River Support Network

HomeDefectsLIN10-5715

Fixed

LIN10-5715 : Security Advisory - cups - CVE-2018-4300

Created: Apr 9, 2019 Updated: Jun 12, 2019

Resolved Date: May 16, 2019

Found In Version: 10.17.41.15

Fix Version: 10.17.41.16

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2018-4300 User=admin}

CVEs

CVE-2018-4300