PT-2025-37249 · Openprinting+9 · Cups+9

Hvenev-Insait · Publicado 2025-09-11 · Atualizado 2026-05-13 · CVE-2025-58060

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions: OpenPrinting CUPS versions 2.4.12 and earlier

Description: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. When the AuthType is set to anything but Basic, if a request contains an Authorization: Basic ... header, the password is not checked, resulting in authentication bypass. Any configuration allowing an AuthType that is not Basic is affected.

Recommendations: Update to version 2.4.13 or later.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

ALSA-2025:15700

ALSA-2025:15701

ALSA-2025:15702

ALT-PU-2025-11731

ALT-PU-2025-12797

AZL-67112

AZL-67269

BDU:2025-11019

CESA-2025_15702

CVE-2025-58060

DLA-4298-1

DSA-5998-1

GHSA-4C68-QGRH-RMMQ

INFSA-2025_15700

INFSA-2025_15702

MGASA-2026-0001

OESA-2025-2334

OPENSUSE-SU-2025:15562-1

OPENSUSE-SU-2026:20172-1

RHSA-2025:15700

RHSA-2025:15701

RHSA-2025:15702

RHSA-2025:16590

RHSA-2025:16591

RHSA-2025:16592

RHSA-2025:17049

RHSA-2025:17054

RHSA-2025:17141

RHSA-2025:17144

RHSA-2025:17164

RHSA-2025_15700

RHSA-2025_15702

RHSA-2026:8814

SUSE-SU-2025:03178-1

SUSE-SU-2025:03261-1

SUSE-SU-2025_03178-1

SUSE-SU-2025_03261-1

SUSE-SU-2026:20229-1

SUSE-SU-2026:20231-1

SUSE-SU-2026:20528-1

SUSE-SU-2026:20535-1

USN-7745-1

Produtos afetados

Alt Linux

Almalinux

Cups

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Referências · 107

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58060.json · Exploit
• https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq · Aviso do Fabricante
• https://github.com/OpenPrinting/cups/commit/595d691075b1d396d2edfaa0a8fd0873a0a1f221 · Correção
• https://github.com/OpenPrinting/cups/commit/429756fd1355bfc91484ff3f04960d4a6b2b155a · Nota
• https://abf.rosa.ru/advisories/ROSA-SA-2025-3041 · Nota
• https://ubuntu.com/security/notices/USN-7745-1 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2026-0001.html · Nota de Segurança
• https://osv.dev/vulnerability/DLA-4298-1 · Aviso do Fabricante
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1216SE320 · Aviso do Fabricante
• https://docs.bell-sw.com/security/cves/CVE-2025-58060 · Nota
• https://errata.almalinux.org/8/ALSA-2025-15702.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/cve-2025-58060 · Nota
• https://osv.dev/vulnerability/DSA-5998-1 · Aviso do Fabricante
• https://bugzilla.redhat.com/2392595 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-58060 · Nota de Segurança