-
Type:
Bug
-
Status: In Development
-
Priority:
Low
-
Resolution: Unresolved
-
Affects Version/s: None
-
Fix Version/s: None
-
Component/s: None
-
Labels:None
-
Environment:Production
-
Bug Severity:Low
-
Level:Admin, Employee, Partner
-
Module:BenAdmin - Security
-
Reported by:Harbinger
-
Company:All Clients/Multiple Clients
-
Item State:Development - In Analysis
A cookie has been set without the HttpOnly flag, which means that the cookie can be accessed by JavaScript. If a malicious script can be run on this page then the cookie will be accessible and can be transmitted to another site. If this is a session cookie then session hijacking may be possible.
For more details please refer attached HTML report
CC SamirRakesh RoyJaideep Vinchurkaranirudha joshi
SearchEmp_Spider.html
- relates to
-
NF-2714 Vulnerability Assessment and Penetration Testing for Workterra on Azure US environment.
-
- To Do
-
Attachment | StaticReport_Spider.html [ 69272 ] |
Attachment | EnrollNowWithPartnerLogin.html [ 69273 ] |
Status | Open [ 1 ] | In Development [ 10007 ] |
Item State | Parent values: Development(10200)Level 1 values: On Hold(10207) |
Assignee | Santosh Balid [ santosh.balid ] | Gaurav Sodani [ gaurav.sodani ] |
Remaining Estimate | 0h [ 0 ] | |
Time Spent | 3.5h [ 12600 ] | |
Worklog Id | 106728 [ 106728 ] |
Item State | Parent values: Development(10200)Level 1 values: On Hold(10207) | Parent values: Development(10200)Level 1 values: In Analysis(10204) |
Time Spent | 3.5h [ 12600 ] | 7.5h [ 27000 ] |
Worklog Id | 107676 [ 107676 ] |
Assignee | Gaurav Sodani [ gaurav.sodani ] | Vijayendra Shinde [ ID10506 ] |
Link | This issue relates to DEV-13718 [ DEV-13718 ] |