CVE-2015-3155: Medium severity the foreman vulnerability
Foreman before 1.8.1 does not set the secure flag for the sessionid cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Other sources
It was reported that the sessionid cookie in Foreman is set without the Secure flag. This may allow an attacker to perform a "session hijacking" attack.
Upstream bug: http://projects.theforeman.org/issues/10275 Proposed fix: https://github.com/theforeman/foreman/pull/2328
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3155?
CVE-2015-3155 is classified as a medium severity vulnerability.
How do I fix CVE-2015-3155?
To fix CVE-2015-3155, upgrade Foreman to version 1.8.1 or later to ensure the _session_id cookie is set with the secure flag.
What kind of attack does CVE-2015-3155 enable?
CVE-2015-3155 enables remote attackers to capture the _session_id cookie through man-in-the-middle attacks.
Which versions of Foreman are affected by CVE-2015-3155?
Foreman versions up to and including 1.8.0 are affected by CVE-2015-3155.
Is CVE-2015-3155 related to cookie security?
Yes, CVE-2015-3155 specifically relates to the lack of a secure flag on the _session_id cookie, compromising its security during transmission.