Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xm48-7qq2-36x4

Опубликовано: 23 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

EPSS

Процентиль: 41%
0.00192
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 3 лет назад

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

CVSS3: 4.2
redhat
почти 4 года назад

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

CVSS3: 6.5
nvd
больше 3 лет назад

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

CVSS3: 6.5
debian
больше 3 лет назад

An Incorrect Permission Assignment for Critical Resource flaw was foun ...

EPSS

Процентиль: 41%
0.00192
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-732