Skip to content
OpenAdvisories

Weakness (CWE)

CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

Variant Draft

The Secure attribute for sensitive cookies in HTTPS sessions is not set.

How to prevent it (1 mitigation)

  1. Implementation

    Always set the secure attribute when the cookie should be sent via HTTPS only.

Source: MITRE CWE-614

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.