How to resolve "Application Disables 'secure' Flag on Cookies" vulnerability in WebSphere

Objective

Resolve "Application Disables 'secure' Flag on Cookies" vulnerability in WebSphere reported by the Java Agent in Assess mode.

Process

Depending on your version of WebSphere, follow the process in the IBM KBs:

• Setting the HTTPOnly and Secure Flags on WebSphere Application Server Cookies
• Setting the HTTPOnly and Secure Flags on WebSphere Liberty Profile Server Cookies