CVE-2022-1655

State: Published
Severity: Not scored
Published: Jul 22, 2022
Updated: Aug 3, 2024
Reserved: May 10, 2022

Description

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.

Scores

The record has no CVSS score.

Weaknesses

CWE-732

Affected Products

Product	Versions
OpenStackn/a	OpenStack 16.2Affected

References

https://access.redhat.com/security/cve/cve-2022-1655

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.