Cisco Bug: CSCuo89889 - ACS 5.5: Set-Cookie does not use HTTPOnly Keyword

Last Modified

Jul 01, 2015

Products (1)

Cisco Secure Access Control Server Solution Engine

Known Affected Releases

5.5(0.1) 5.5(0.46.4)

Description (partial)

Symptom:
This is a modification on the product to adopt new secure code best practices to enhance the security posture and resiliency of the product.

Conditions:
Device configured with default configuration.

Two cookies are not set with HttpOnly and Secure flags.

View Bug Details in Bug Search Tool Login Required

Why Is Login Required?

Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

Full Description (including symptoms, conditions and workarounds)
Status
Severity
Known Fixed Releases
Related Community Discussions
Number of Related Support Cases

Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.

Learn More About Cisco Service Contracts