Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xm48-7qq2-36x4

Опубликовано: 23 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

EPSS

Процентиль: 41%
0.00523
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 4 лет назад

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

CVSS3: 4.2
redhat
больше 4 лет назад

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

CVSS3: 6.5
nvd
около 4 лет назад

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

CVSS3: 6.5
debian
около 4 лет назад

An Incorrect Permission Assignment for Critical Resource flaw was foun ...

EPSS

Процентиль: 41%
0.00523
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-732