Wind River Support Network

HomeDefectsLIN9-8340

Fixed

LIN9-8340 : Security Advisory - cups - CVE-2018-4300

Created: Apr 9, 2019 Updated: Jun 12, 2019

Resolved Date: May 24, 2019

Found In Version: unknown

Fix Version: 9.0.0.21

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2018-4300 User=admin}

CVEs

CVE-2018-4300