VYPR
Unrated severityNVD Advisory· Published Jul 29, 2014· Updated May 6, 2026

CVE-2014-5031

CVE-2014-5031

Description

The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.

Affected products

11
  • Apple Inc./Cups7 versions
    cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*range: <=1.7.4
    • cpe:2.3:a:apple:cups:1.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:cups:1.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:cups:1.7.1:b1:*:*:*:*:*:*
    • cpe:2.3:a:apple:cups:1.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:cups:1.7.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:cups:1.7:rc1:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*+ 2 more
    • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

10

News mentions

0

No linked articles in our index yet.