Beveiligingsadvies

CVE-2022-1655

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-07-22 14:54:02
Laatst bijgewerkt 2024-08-03 00:10:03
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.