CVE-2022-1655CWE-732

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack

published July 22, 2022

CVSS
—
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00554 · 45.5th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2022-07-22T14:54Z
EPSS history
Timeline
  • 22 JUL 14:54Z
    An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack
    cvelistv5