{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-29T14:15:25.893","vulnerabilities":[{"cve":{"id":"CVE-2018-4300","sourceIdentifier":"product-security@apple.com","published":"2019-04-03T18:29:06.017","lastModified":"2026-06-17T01:58:44.783","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10."},{"lang":"es","value":"La cookie de sesión generada por la interfaz web de CUPS era fácil de adivinar en Linux, permitiendo un acceso de script no autorizado a la interfaz web cuando está deshabilitada. Este problema afectaba a las versiones anteriores a la v2.2.10."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"CUPS","versions":[{"version":"Versions prior to: v2.2.10","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.10","matchCriteriaId":"8B24CA2D-FC2D-4C8D-9B5A-84A14486F1E9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/107785","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"https://github.com/apple/cups/releases/tag/v2.2.10","source":"product-security@apple.com","tags":["Release Notes","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00028.html","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/107785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/apple/cups/releases/tag/v2.2.10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}