F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

vvskaladhar_488's avatar
vvskaladhar_488
Icon for Nimbostratus rankNimbostratus
Jan 26, 2017

The cookie does not contain the "HTTPOnly" attribute.

Hi All, we got vulnerability as below in our vulnerability scan   Threat The cookie does not contain the "HTTPOnly" attribute.   Impact Cookies without the "HTTPOnly" attribute are permitted ...
BIG-IP
LTM
security
vvskaladhar_488's avatar
vvskaladhar_488
Icon for Nimbostratus rankNimbostratus
Jan 26, 2017

Hi All,

 

As per my understanding "HTTPOnly" attribute to cookies can be inserted Only by using ASM as I dont see this option in LTM . please let me know if there is any way to solve above vulnerability.