Skip to content
OpenAdvisories
Unscored RHSA-2015:0834 1 CVE

Red Hat Security Advisory: novnc security update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenStack 5 openstack:5::el7 novnc 0:0.5.1-2.el7ost

Vulnerabilities 1

  • Unscored —
    CVE-2013-7436

    noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attack…

    novnc Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1193451
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0834.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-7436
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-7436
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-7436