For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

vvskaladhar_488's avatar
vvskaladhar_488
Icon for Nimbostratus rankNimbostratus
Jan 27, 2017

The cookie does not contain the "HTTPOnly" attribute.

Hi All, we got vulnerability as below in our vulnerability scan   Threat The cookie does not contain the "HTTPOnly" attribute.   Impact Cookies without the "HTTPOnly" attribute are permitted ...
BIG-IP
LTM
security
vvskaladhar_488's avatar
vvskaladhar_488
Icon for Nimbostratus rankNimbostratus
Jan 27, 2017

Hi All,

 

As per my understanding "HTTPOnly" attribute to cookies can be inserted Only by using ASM as I dont see this option in LTM . please let me know if there is any way to solve above vulnerability.