OC Security Observation Secure JSESSIONID

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

Listed URL’s have session (JSESSIONID) cookies that do not have the “Secure” attribute set.

 

 

Environment

Release : 20.3

Component : UIM - SECURITY VULNERABILITIES

Resolution

This issue will be fixed along with OC 20.4 release scheduled for Q3CY21 (tentatively in Sep 2021)