CVE-2012-2144

Published: 04 May 2012

Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.

Priority

Status

Package	Release	Status
horizon Launchpad, Ubuntu, Debian	Upstream	Needs triage






	Patches: Upstream: https://github.com/openstack/horizon/commit/abc532fa90eac1cc970423339347e318aa8d1b1a

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2144
https://lists.launchpad.net/openstack/msg11263.html
https://usn.ubuntu.com/usn/usn-1439-1
NVD
Launchpad
Debian

Bugs

https://bugs.launchpad.net/horizon/+bug/978896

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM