View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2018-4300 severity important: SUSE including 13 source package names (cups, cups-client, …), 221 product×package rows across 56 product lines (HPE Helion OpenStack 8, SLES for SAP Applications 11 SP3, … (56 product lines)): Known Not Affected 221.
The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.