CVE-2014-5031 Information disclosure in n/a

Medium 5.0 Published 29 Jul 2014 Updated 6 Aug 2024

Remote attackers can obtain sensitive information from the CUPS web interface due to missing world-readable permission checks on files.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2014-5031?

CVE-2014-5031 is a medium-severity vulnerability in Apple Cups, published on 29 Jul 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.

Weakness: CWE-264

Which versions are affected by CVE-2014-5031?

It affects 2 products.

Products include Apple Cups, Canonical Ubuntu Linux.

How do I fix CVE-2014-5031?

Upgrade to a fixed version.

Is CVE-2014-5031 being exploited?

There is no known exploitation of CVE-2014-5031 in the wild and no public exploit code.

All Apple Cups vulnerabilities

Sources

Also known as DEBIAN-CVE-2014-5031, GHSA-2p5x-6x62-jgxf, UBUNTU-CVE-2014-5031.