CVE-2010-0540 — Cross-Site Request Forgery in Apple MAC OS X

CWE-352 — Cross-Site Request Forgery9 documents8 sources
Severity
6.0MEDIUMNVD
EPSS
0.4%
top 39.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple CupsApple MAC OS XApple MAC OS X Server
Timeline
PublishedJun 17
Latest updateMay 2

Description

Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 6.8 | Impact: 6.4

Affected Packages3 packages

▶Debianapple/cups< 1.4.4-1+3
▶NVDapple/mac_os_x5 versions+4
▶NVDapple/mac_os_x_server5 versions+4

Patches

Patch: support.apple.com ↗Patch: www.securityfocus.com ↗Patch: www.vupen.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-hfwh-42mw-69v8: Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1↗2022-05-02
▶
OSV
CVE-2010-0540: Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1↗2010-06-17
▶
CVEList
CVE-2010-0540: Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1↗2010-06-17
▶

📋Vendor Advisories

3
Ubuntu
CUPS vulnerabilities↗2010-06-21
▶
Red Hat
CUPS administrator web interface CSRF↗2010-06-15
▶
Debian
CVE-2010-0540: cups - Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS bef...↗2010
▶

💬Community

2
Bugzilla
CVE-2010-0540 CVE-2010-0542 CVE-2010-1748 CVE-2010-2431 cups various flaws [fedora-all]↗2010-06-17
▶
Bugzilla
CVE-2010-0540 CUPS administrator web interface CSRF↗2010-05-04
▶
CVE-2010-0540 — Cross-Site Request Forgery in Apple | cvebase