Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-58060

Опубликовано: 12 сент. 2025
Источник: msrc
CVSS3: 8
EPSS Низкий

Описание

cups has Authentication bypass with AuthType Negotiate

EPSS

Процентиль: 8%
0.00033
Низкий

8 High

CVSS3

Связанные уязвимости

CVSS3: 8
ubuntu
около 2 месяцев назад

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password is not checked. This results in authentication bypass. Any configuration that allows an `AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue.

CVSS3: 8
redhat
около 2 месяцев назад

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password is not checked. This results in authentication bypass. Any configuration that allows an `AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue.

CVSS3: 8
nvd
около 2 месяцев назад

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password is not checked. This results in authentication bypass. Any configuration that allows an `AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue.

CVSS3: 8
debian
около 2 месяцев назад

OpenPrinting CUPS is an open source printing system for Linux and othe ...

rocky
около 1 месяца назад

Important: cups security update

EPSS

Процентиль: 8%
0.00033
Низкий

8 High

CVSS3