Aller au contenu
en Se connecter
Non notée

CVE-2022-1655 An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack

Description

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

Produits et versions touchés

Produit Versions touchées Corrigé en
OpenStack Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de OpenStack

Les 4 CVE de OpenStack →
CVE-2022-3261 A flaw was found in OpenStack 4.4 Moyenne CVE-2023-2088 A flaw was found in OpenStack due to an inconsistency between Cinder and Nova 6.5 Moyenne CVE-2022-4134 A flaw was found in openstack-glance 2.8 Faible
Suivre cette CVE