How to add the 'Secure' attribute to all sensitive cookies in apache tomcat to fix Missing Secure Attribute in Encrypted Session (SSL) Cookie

Sajjad Ali Khan

(31●41●52) Sep 15 '15, 5:18 a.m.

Hi All,

Can anyone please help me to add the 'Secure' attribute to all sensitive cookies in apache tomcat to fix "Missing Secure Attribute in Encrypted Session (SSL) Cookie" vulnerability of tomcat 7.0.64

Regards,
Sajjad.

0 votes

1 answer

11,430 views

0 votes

One answer

Permanent link

Kevin Ramer

(4.5k●9●186●201) Sep 15 '15, 2:26 p.m.

There are tons of discussions on this in the wild-wild web. Most speak to configuration changes on the server.

http://support.filecatalyst.com/index.php?/Knowledgebase/Article/View/209/0/securing-session-cookies-in-tomcat-with--httponly-and-securetrue

Is one such discussion.

0 votes

Comments

Sajjad Ali Khan

Sep 17 '15, 2:52 a.m.

Kevin Ramer thanks dear for the reply but i have tried to do what is mentioned in your provided link, still the same vulnerability in my scan report

Your answer

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers

Answers and Comments

Question details

rational-team-concert

× 43,075

usage

× 12,143

clm

× 7,622

jazz-foundation

× 4,381

jazz.net

× 1,736

Question asked: Sep 15 '15, 5:18 a.m.

Question was seen: 11,430 times

Last updated: Sep 17 '15, 2:52 a.m.

How to add the 'Secure' attribute to all sensitive cookies in apache tomcat to fix Missing Secure Attribute in Encrypted Session (SSL) Cookie

Sajjad Ali Khan

1 answer

11,430 views

0 votes

One answer

Kevin Ramer

Comments

Sajjad Ali Khan

Your answer

Follow this question

Question details

Related questions