CVE-2015-3207

In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.

• CWE-614
• CWE-311

• https://bugzilla.redhat.com/show_bug.cgi?id=1221882Permissions Required
• https://github.com/openshift/origin/pull/2261Patch, Third Party Advisory
• https://github.com/openshift/origin/pull/2291Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1221882Permissions Required
• https://github.com/openshift/origin/pull/2261Patch, Third Party Advisory
• https://github.com/openshift/origin/pull/2291Third Party Advisory

Published

Jul 7, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3201Thermostat before 2.0.0 uses world-readable permissions for …
• CVE-2015-3202fusermount in FUSE before 2.9.3-15 does not properly clear t…
• CVE-2015-3203Unrestricted file upload vulnerability in h5ai before 0.25.0…
• CVE-2015-3204libreswan 3.9 through 3.12 allows remote attackers to cause …
• CVE-2015-3205libmimedir allows remote attackers to execute arbitrary code…
• CVE-2015-3206The checkPassword function in python-kerberos does not authe…
• CVE-2015-3208Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-3209Heap-based buffer overflow in the PCNET controller in QEMU a…
• CVE-2015-3210Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCR…9.8
• CVE-2015-3211php-fpm allows local users to write to or create arbitrary f…
• CVE-2015-3212Race condition in net/sctp/socket.c in the Linux kernel befo…
• CVE-2015-3213The gesture handling code in Clutter before 1.16.2 allows ph…