CX HttpOnlyCookies @ src/main/webapp/admin/adminlogin.jsp [refs/heads/master]

[github-actions]

HttpOnlyCookies issue exists @ src/main/webapp/admin/adminlogin.jsp in branch refs/heads/master

The web application's Cookie method creates a cookie privilege, at line 27 of src\main\webapp\admin\adminlogin.jsp, and returns it in the response. However, the application is not configured to automatically set the cookie with the "httpOnly" attribute, and the code does not explicitly add this to the cookie.

Severity: Medium

CWE:1004

Vulnerability details and guidance

Checkmarx

Training
Recommended Fix

Lines: 27

---

Code (Line #27):

                                   Cookie privilege=new Cookie("privilege","admin");

---

[github-actions]

Issue still exists.