← All advisories

Medium severity5.3NVD Advisory· Published Jul 7, 2022· Updated Jun 17, 2026

CVE-2015-3207

CVE-2015-3207

Description

In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/openshift/originGo	< 1.0.0	1.0.0

Affected products

3

Openshift/Origin
cpe:2.3:a:openshift:origin:3.0.0:*:*:*:*:*:*:*
Openshift/Openshift Origindescription
ghsa-coords
pkg:golang/github.com/openshift/origin
Range: < 1.0.0

Patches

Vulnerability mechanics

References

5

github.com/openshift/origin/pull/2261nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-rqph-25q9-9jhpghsaADVISORY
github.com/openshift/origin/pull/2291nvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2015-3207ghsaADVISORY
bugzilla.redhat.com/show_bug.cginvdPermissions RequiredWEB

News mentions

0

No linked articles in our index yet.