High severity8.0NVD Advisory· Published Sep 11, 2025· Updated Jun 17, 2026
CVE-2025-58060
CVE-2025-58060
Description
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the AuthType is set to anything but Basic, if the request contains an Authorization: Basic ... header, the password is not checked. This results in authentication bypass. Any configuration that allows an AuthType that is not Basic is affected. Version 2.4.13 fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
45cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:*range: <2.4.13
- (no CPE)range: <=2.4.12
- (no CPE)range: < 2.4.13
- osv-coords42 versionspkg:rpm/almalinux/cupspkg:rpm/almalinux/cups-clientpkg:rpm/almalinux/cups-develpkg:rpm/almalinux/cups-filesystempkg:rpm/almalinux/cups-ipptoolpkg:rpm/almalinux/cups-libspkg:rpm/almalinux/cups-lpdpkg:rpm/almalinux/cups-printerapppkg:rpm/opensuse/cups&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/cups&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/cups&distro=openSUSE%20Tumbleweedpkg:rpm/suse/cups&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP6pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSSpkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/cups&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/cups&distro=SUSE%20Linux%20Micro%206.0pkg:rpm/suse/cups&distro=SUSE%20Linux%20Micro%206.1pkg:rpm/suse/cups&distro=SUSE%20Linux%20Micro%206.2pkg:rpm/suse/cups&distro=SUSE%20Manager%20Proxy%20LTS%204.3pkg:rpm/suse/cups&distro=SUSE%20Manager%20Server%20LTS%204.3
< 1:2.3.3op2-33.el9_6.1+ 41 more
- (no CPE)range: < 1:2.3.3op2-33.el9_6.1
- (no CPE)range: < 1:2.3.3op2-33.el9_6.1
- (no CPE)range: < 1:2.3.3op2-33.el9_6.1
- (no CPE)range: < 1:2.3.3op2-33.el9_6.1
- (no CPE)range: < 1:2.3.3op2-33.el9_6.1
- (no CPE)range: < 1:2.3.3op2-33.el9_6.1
- (no CPE)range: < 1:2.3.3op2-33.el9_6.1
- (no CPE)range: < 1:2.3.3op2-33.el9_6.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.4.16-160000.1.1
- (no CPE)range: < 2.4.14-1.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 1.7.5-20.54.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.4.16-160000.1.1
- (no CPE)range: < 1.7.5-20.54.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.4.16-160000.1.1
- (no CPE)range: < 2.4.16-1.1
- (no CPE)range: < 2.4.16-slfo.1.1_1.1
- (no CPE)range: < 2.4.16-160000.1.1
- (no CPE)range: < 2.2.7-150000.3.72.1
- (no CPE)range: < 2.2.7-150000.3.72.1
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.