CVE-2015-3207

CVE-2015-3207

In Openshift Origin 3 the cookies being set in console have no ‘secure’, ‘HttpOnly’ attributes.

Source: CVE-2015-3207