CVE-2012-2144
OpenStack Horizon Session Fixation
CVE-2012-2144 is a medium vulnerability (CVSS 6.8) in Openstack Horizon, published June 5, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.09%, the 81st percentile. Fixed in horizon 8.0.0a0.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 2.09%EPSS, 81st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
8.0.0a0horizon +3 more
Description
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
CVE-2012-2144- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
CVE-2012-2144- Updated
- 2026-11-02
EUVDEUVD-2012-0011No score
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
EUVD-2012-0011- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w7h9-8wr4-hwqhNo score
OpenStack Horizon Session Fixation
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
GHSA-w7h9-8wr4-hwqh- Weakness
- CWE-384
- Updated
- 2026-11-02
OSVNo score
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
CVE-2012-2144- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2144No score
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
DEBIAN-CVE-2012-2144- Updated
- 2026-11-02
OSVGHSA-w7h9-8wr4-hwqhNo score
OpenStack Horizon Session Fixation
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
GHSA-w7h9-8wr4-hwqh- Weakness
- CWE-384
- Updated
- 2026-11-02
OSVPYSEC-2012-33No score
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.
- Record
PYSEC-2012-33- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/49024
openwall.com/lists/oss-security/2012/05/05/1
exchange.xforce.ibmcloud.com/vulnerabilities/75423
lists.fedoraproject.org/pipermail/package-announce/2012-May/081173.html
bugs.launchpad.net/horizon/+bug/978896
ubuntu.com/usn/usn-1439-1
Show 10 moreShow less
github.com/openstack/horizon/commit/041b1c44c7d6cf5429505067c32f8f35166a8bab
securityfocus.com/bid/53399
osvdb.org/81741
nvd.nist.gov/vuln/detail/CVE-2012-2144
web.archive.org/web/20200228173630/http://www.securityfocus.com/bid/53399
security-tracker.debian.org/tracker/CVE-2012-2144