Cookie not secure

Disclosed: 2016-05-25 12:24:08 By thalaivarsubu To coinbase
Unknown
Vulnerability Details
The cloudflare cookie does not have the Secure flag set. When a cookie is set with the Secure flag, it instructs the browser that the cookie can only be accessed over secure SSL channels. This is an important security protection for session cookies.
Actions
View on HackerOne
Report Stats
  • Report ID: 140742
  • State: Closed
  • Substate: not-applicable
  • Upvotes: 1
Share this report