CVE-2018-4300

—

CVSS 3.0

5.9 medium

EPSS

2%p78

Published

Apr 3, 2019 (Apr 3, 2019)

Modified

Jun 17, 2026

Description

The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.

Vendors: apple
Products: cups
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.