CVE-2004-0462 - Vulnerability Issue by Alertlogic

Hi, The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session. To fix this:

when HTTP_RESPONSE {
set myValues [HTTP::cookie names]
foreach mycookies $myValues {
   HTTP::cookie secure $mycookies enable
}
}

Hi Vitaliy,

Your solution helped, thank you.

Regards

Hi,

I just did it, thanks for letting me know about this.

Will definitely do in future posts too.

Thanks and Regards Parveez