CVE-2015-3207: Medium severity red hat openshift origin vulnerability
Published Jul 7, 2022
·Updated
In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.
Affected Software
1 affected component
Openshift Origin=3.0.0
Remediation
Patch Available
Event History
Jul 7, 2022
CVE Published
via MITRE·12:25 PM
Data Sourced
via MITRE·12:25 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2015-3207?
CVE-2015-3207 is categorized as a medium severity vulnerability.
2
How do I fix CVE-2015-3207?
To mitigate CVE-2015-3207, configure your OpenShift Origin 3.0.0 cookies to include 'secure' and 'HttpOnly' attributes.
3
What systems are affected by CVE-2015-3207?
CVE-2015-3207 affects OpenShift Origin version 3.0.0.
4
What type of vulnerability is CVE-2015-3207?
CVE-2015-3207 is an issue related to improper cookie attributes and potential exposure of sensitive session information.
5
Is there a patch available for CVE-2015-3207?
Yes, you should check for updates or patches in OpenShift Origin to address CVE-2015-3207.