AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-5029

LOW · CVSS 1.5 EPSS 0.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-07-29 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 1.5. See the original NVD description below for full technical details.

CVE
CVE-2014-5029
Severity
LOW
CVSS
1.5
EPSS
0.32%

Original NVD Description

The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/ and language[0] set to null. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3537.