CVE-2012-2144

EUVD-2012-0011
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
openstackhorizon
2012.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
horizon
bookworm
3:23.0.0-5+deb12u1
fixed
bullseye
3:18.6.2-5+deb11u2
fixed
sid
3:25.1.0-2
fixed
trixie
3:25.1.0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
horizon
hardy
dne
lucid
dne
natty
dne
oneiric
dne
precise
Fixed 2012.1-0ubuntu8.1
released
References
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081173.html
http://secunia.com/advisories/49024
http://secunia.com/advisories/49071
http://ubuntu.com/usn/usn-1439-1
http://www.openwall.com/lists/oss-security/2012/05/05/1
http://www.osvdb.org/81741
http://www.securityfocus.com/bid/53399
https://bugs.launchpad.net/horizon/+bug/978896
https://exchange.xforce.ibmcloud.com/vulnerabilities/75423
https://github.com/openstack/horizon/commit/041b1c44c7d6cf5429505067c32f8f35166a8bab
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081173.html
http://secunia.com/advisories/49024
http://secunia.com/advisories/49071
http://ubuntu.com/usn/usn-1439-1
http://www.openwall.com/lists/oss-security/2012/05/05/1
http://www.osvdb.org/81741
http://www.securityfocus.com/bid/53399
https://bugs.launchpad.net/horizon/+bug/978896
https://exchange.xforce.ibmcloud.com/vulnerabilities/75423
https://github.com/openstack/horizon/commit/041b1c44c7d6cf5429505067c32f8f35166a8bab