CVE-2018-4300

5.9 mediumEPSS 1.8%

Medium (5.9) in apple cups. EPSS 1.8% chance of exploitation in the next 30 days.

The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2019-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:cups

References

http://www.securityfocus.com/bid/107785
https://github.com/apple/cups/releases/tag/v2.2.10
https://lists.debian.org/debian-lts-announce/2019/09/msg00028.html
http://www.securityfocus.com/bid/107785
https://github.com/apple/cups/releases/tag/v2.2.10

Check your stack JSON