How to add the 'Secure' attribute to all sensitive cookies in apache tomcat to fix Missing Secure Attribute in Encrypted Session (SSL) Cookie

Sajjad Ali Khan

(31●41●52) Sep 15 '15, 5:18 a.m.

Hi All,

Can anyone please help me to add the 'Secure' attribute to all sensitive cookies in apache tomcat to fix "Missing Secure Attribute in Encrypted Session (SSL) Cookie" vulnerability of tomcat 7.0.64

Regards,
Sajjad.

0 votes

1 answer

7,913 views

0 votes

One answer

Permanent link

Kevin Ramer

(4.5k●9●186●201) Sep 15 '15, 2:26 p.m.

There are tons of discussions on this in the wild-wild web. Most speak to configuration changes on the server.

http://support.filecatalyst.com/index.php?/Knowledgebase/Article/View/209/0/securing-session-cookies-in-tomcat-with--httponly-and-securetrue

Is one such discussion.

0 votes

Comments

Sajjad Ali Khan

Sep 17 '15, 2:52 a.m.

Kevin Ramer
thanks dear for the reply but i have tried to do what is mentioned in your provided link,

still the same vulnerability in my scan report

Your answer

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers

Answers and Comments

Question details

rational-team-concert

× 42,898

usage

× 12,019

clm

× 7,495

jazz-foundation

× 4,323

jazz.net

× 1,700

Question asked: Sep 15 '15, 5:18 a.m.

Question was seen: 7,913 times

Last updated: Sep 17 '15, 2:52 a.m.

How to add the 'Secure' attribute to all sensitive cookies in apache tomcat to fix Missing Secure Attribute in Encrypted Session (SSL) Cookie

Sajjad Ali Khan

1 answer

7,913 views

0 votes

One answer

Kevin Ramer

Comments

Sajjad Ali Khan

Your answer

Follow this question

Question details

Related questions