CVE-2012-2144
Fixed in a distro release EPSS 2%
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
Products: openstack horizon
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | horizon | 8.0.0a0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | horizon | 2012.1-4 |
| Debian 13 | horizon | 2012.1-4 |
| Debian 14 | horizon | 2012.1-4 |