Skip to content
fr Sign in
Not rated

CVE-2022-1655 An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack

Description

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

Affected products and versions

Product Affected versions Fixed in
OpenStack Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of OpenStack

The 4 CVEs of OpenStack →
CVE-2022-3261 A flaw was found in OpenStack 4.4 Medium CVE-2023-2088 A flaw was found in OpenStack due to an inconsistency between Cinder and Nova 6.5 Medium CVE-2022-4134 A flaw was found in openstack-glance 2.8 Low
Track this CVE