Description (CNA)
In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Openshift Origin | affected Openshift Origin 3 |
CWE
CWE-614
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1221882
- https://github.com/openshift/origin/pull/2261
- https://github.com/openshift/origin/pull/2291
ADP enrichment
No English description supplied.