Cross-site request forgery - CVE-2018-4300,CVE-2018-4700

Vulnerability identifier: #VU16519

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-4300,CVE-2018-4700

CWE-ID: CWE-352

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform CSRF attack.

The weakness exists in the CUPS printing server due to insufficient CSRF protections. A remote attacker can create a specially crafted HTML page or URL, trick the victim into visiting it, gain access to the system and perform arbitrary actions.

cups (Alpine package)
cups (Red Hat package)
cups
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Opensuse
Fedora
Data Computing Appliance (DCA)

Install updates from vendor's website.

cups (Alpine package) - update to 2.2.10-r0
cups (Red Hat package) - update to 1.6.3-43.el7
cups - addressed in versions 2.2.6-27.fc28, 2.2.6-28.fc28, 2.2.6-29.fc28, 2.2.6-30.fc28, 2.2.8-7.fc29
Data Computing Appliance (DCA) - update to 4.3.0.0

• https://bugzilla.redhat.com/show_bug.cgi?id=1649347

• OpenSUSE Linux update for cups
• OpenSUSE Linux update for cups
• Red Hat Enterprise Linux 7 update for cups
• Cross-site request forgery in cups (Alpine package)
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Fedora 29 update for cups
• Fedora 28 update for cups
• Fedora 28 update for cups
• Fedora 28 update for cups
• Fedora 28 update for cups