CVE-2015-3207

CVE-2015-3207

Vendor N/A

Product Openshift Origin

Weakness CWE-614 · Cookie without Secure flag

Published July 7, 2022

Last update August 6, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.

Key dates

02Disclosure timeline

July 7, 2022 CVE published

August 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2015-3207 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/614.html

Related vulnerabilities

04Related CVE

CVE-2021-3882 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmb CVE-2023-5866 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq CVE-2024-35211 CVE-2025-36026 IBM Datacap information disclosure CVE-2026-4820 IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_<workspace_name> was not set with secure flag