exploitDog

CVE-2015-3207

Опубликовано: 07 июл. 2022

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=1221882
Permissions Required
https://github.com/openshift/origin/pull/2261
Patch
Third Party Advisory
https://github.com/openshift/origin/pull/2291
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1221882
Permissions Required
https://github.com/openshift/origin/pull/2261
Patch
Third Party Advisory
https://github.com/openshift/origin/pull/2291
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openshift:origin:3.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00703

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-614

CWE-311

Связанные уязвимости

CVE-2015-3207

CVSS3: 5.3

redhat

около 6 лет назад

In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.

GHSA-rqph-25q9-9jhp

CVSS3: 5.3

github

около 4 лет назад

Insecure cookies in Openshift Origin

EPSS

Процентиль: 50%

0.00703

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-614

CWE-311