- There are cookies set by the Netweaver Application server that do not have 'Secure' and/or 'HttpOnly' attributes . This may have been hightlighted during a vulnerability scan for example.
- You would like to ensure that these cookies are set with 'Secure' and 'HttpOnly' attributes.
SAP Netweaver Application Server
icf/set_HTTPonly_flag_on_cookies, SystemCookiesDataProtection, SystemCookiesHTTPSProtection, ume.logon.httponlycookie, ume.logon.security.enforce_secure_cookie, login/ticket_only_by_https, com.sap.engine.security.authentication.original , KBA , BC-JAS-WEB , Web Container, HTTP, JavaMail, Servlets , BC-JAS-SEC , Security, User Management , EP-PIN-AI , Application Integration , BC-MID-ICF , Internet Communication Framework , CA-FLP-ABA , ABAP Services , MOB-UIA-LIB-AUT , Authentication , How To
About this pageThis is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).
Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.