Discussions
McAfee Alert - Potential Sensitive Persistent Cookie Sent Over a Non-Encrypted (SSL)
We received 2 notices from ScanAlert (McAfee) regarding this vulnerability:
Description
The remote host appears to have set a potentially sensitive persistent cookie across the internet in plain text.
An HTTP cookie is a piece of text-based data created by a website and sent to a web browser client and then sent back to the website without modification by the browser. The various uses for HTTP cookies include authentication, differentiation of users, maintaining data related to a user when they are viewing the website, maintaining a list of contents stored as when used by a shopping cart application, etc. In short, this is a way to identify a user by the computer they used to access the site as well as providing a way for the browser to keep