Summary
The host is running a server with SSL and is prone to information disclosure vulnerability.
Insight
The flaw is due to SSL cookie is not using 'secure' attribute, which allows cookie to be passed to the server by the client over non-secure channels (http) and allows attacker to conduct session hijacking attacks.
remote systems.
Impact Level: Application
Affected
Server with SSL.
Workaround:
Set the 'secure' attribute for any cookies that are sent over an SSL connection.
References
