CVE-2022-26691

cups: authorization bypass when using "local" authorization

Published May 26, 2022 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-3029-1 cups security update
Debian DSA Debian DSA DSA-5149-1 cups security update
Ubuntu USN Ubuntu USN USN-5454-1 CUPS vulnerabilities
Ubuntu USN Ubuntu USN USN-5454-2 CUPS vulnerabilities
History

No history.