CVE-2012-2144: Openstack Horizon

Medium severity, CVSS 6.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie.

Affected products

• Openstack Horizon: version 2012.1 only; version folsom-1 only

Published 2012-06-05. Last modified 2026-06-16.