Read the docs
Red Hat Security Advisory

RHSA-2020:1050

cups security and bug fix update

Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

TI-2018-03250 CVE-2018-4300 · GHSA-7w9x-rg6m-2fh9

Information disclosure in CUPS

Priority LOW 30

The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01841 Published 2019-04-03 Partial fix CWE-200