VULNERABILITY INTELLIGENCE
CVE-2012-5519
CVSS score7.2 HIGH
EPSS probability2.13%
CISA KEVNot currently listed
Published2012-11-20
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0 using certain permissions, which allows local users in the lpadmin group to read or write arbitrary files as root by leveraging the web interface.