[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249966

 
 

909

 
 

195636

 
 

282

 
Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2012-2144Date: (C)2012-06-05   (M)2023-12-22


Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.8
Exploit Score: 8.6
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
SECUNIA-49024
SECUNIA-49071
BID-53399
OSVDB-81741
FEDORA-2012-7369
USN-1439-1
http://www.openwall.com/lists/oss-security/2012/05/05/1
https://bugs.launchpad.net/horizon/+bug/978896
https://github.com/openstack/horizon/commit/041b1c44c7d6cf5429505067c32f8f35166a8bab
openstack-dashboard-session-hijacking(75423)

CPE    2
cpe:/a:openstack:horizon:2012.1
cpe:/a:openstack:horizon:folsom-1
OVAL    3
oval:org.secpod.oval:def:700857
oval:org.secpod.oval:def:103811
oval:org.secpod.oval:def:104255

© SecPod Technologies