90027—Cookie Slack Detector

PUBLISHEDsecurity alertInformational

Active

Metadata

Alert ID:: 90027
Risk:: Informational
Type:: Active
CWE:: CWE-205Observable Behavioral Discrepancy

摘要

Repeated GET requests: drop a different cookie each time, followed by normal request with all cookies to stabilize session, compare responses against original baseline GET. This can reveal areas where cookie based authentication/attributes are not actually enforced.

参考

browse all alerts