CVE-2014-5031: Apple Cups

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors.

Affected products

• Apple Cups: up to and including 1.7.4; version 1.7 only; version 1.7.0 only; version 1.7.1 only; version 1.7.2 only; version 1.7.3 only
• Canonical Ubuntu Linux: version 10.04 only; version 12.04 only; version 14.04 only

Published 2014-07-29. Last modified 2026-06-17.