CVE-2012-2144
OpenStack Horizon Session Fixation
CVE-2012-2144 is a medium vulnerability (CVSS 6.8) in Openstack Horizon, published June 5, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.10%, the 81st percentile. Fixed in horizon 8.0.0a0.
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
Exploit likelihood
What each source reports
NVD Score used
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
CVE-2012-2144- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
CVE-2012-2144- Updated
- 2026-11-02
EUVDEUVD-2012-0011 No score
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
EUVD-2012-0011- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w7h9-8wr4-hwqh No score
OpenStack Horizon Session Fixation
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
GHSA-w7h9-8wr4-hwqh- Weakness
- CWE-384
- Updated
- 2026-11-02
OSV No score
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
CVE-2012-2144- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2144 No score
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
DEBIAN-CVE-2012-2144- Updated
- 2026-11-02
OSVGHSA-w7h9-8wr4-hwqh No score
OpenStack Horizon Session Fixation
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
GHSA-w7h9-8wr4-hwqh- Weakness
- CWE-384
- Updated
- 2026-11-02
OSVPYSEC-2012-33 No score
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
PYSEC-2012-33- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/49024
openwall.com/lists/oss-security/2012/05/05/1
exchange.xforce.ibmcloud.com/vulnerabilities/75423
lists.fedoraproject.org/pipermail/package-announce/2012-May/081173.html
bugs.launchpad.net/horizon/+bug/978896
ubuntu.com/usn/usn-1439-1
Show 10 moreShow less
github.com/openstack/horizon/commit/041b1c44c7d6cf5429505067c32f8f35166a8bab
securityfocus.com/bid/53399
osvdb.org/81741
nvd.nist.gov/vuln/detail/CVE-2012-2144
web.archive.org/web/20200228173630/http://www.securityfocus.com/bid/53399
security-tracker.debian.org/tracker/CVE-2012-2144