tocsin

Debian/horizon: unknown

Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.

Action: Upgrade horizon to 2012.1-4 or later.

Affected

introducedfixedlast affected
02012.1-4-

Fixed versions

2012.1-4

Sources

published · modified · JSON