description: In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes.
problem types: CWE-614
affected:
{
product: Openshift Origin
vendor: n/a
versions:
status: affected, version: Openshift Origin 3
}