RHSA-2022:8856LowCVSS 4.2

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (python-django-horizon) security update

Published
December 7, 2022
Last Modified
August 7, 2026

🔗 CVE IDs covered (1)

CVE-2022-1655 →

📋 Description

CVE-2022-1655 — OpenStack: Horizon session cookies are not flagged HttpOnly

🎯 Affected products4

  • Red Hat OpenStack Platform 16.2
  • openstack-dashboard-1:16.2.3-2.20220926144724.d3d3d18.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2
  • python-django-horizon-1:16.2.3-2.20220926144724.d3d3d18.el8ost.src as a component of Red Hat OpenStack Platform 16.2
  • python3-django-horizon-1:16.2.3-2.20220926144724.d3d3d18.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (7)