For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
May 21, 2014

A persistence cookie contains nothing more than the information pertaining to a load balancing decision. If someone where to steal this cookie and try to use it, they'd certainly be load balanced to the same server, but that in no way has any effect on the total application session or authentication state. The cookie cannot be used to gain access to a user's session.