CVE-2015-3155

5

MEDIUMCVSS v2

Published

August 14, 2015

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

foreman

NPMNode Implementation of Foreman

<= 1.8.0NVD

theforeman/foreman

GitHuban application that automates the lifecycle of servers

<= 1.8.0NVD

foreman

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Python library to manipulate The Foreman through the API

<= 1.8.0NVD

foreman

RubyGemsProcess manager for applications with multiple components

<= 1.8.0NVD

ddollar/foreman

GitHubManage Procfile-based applications

<= 1.8.0NVD

Security Advisories

CVE-2015-3155

Description

More on this CVE