Security Test: Frontend Guessable Cookie Value¶

Scanner(s) Support¶

Description¶

Default Severity: medium

Using easily guessable values for cookies can make your application vulnerable to session hijacking and other security issues. Attackers could potentially guess valid cookie values and impersonate legitimate users.

Reference:

• https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html

Configuration¶

Identifier: frontend_information_disclosure/guessable_cookie_value

Examples¶

All configuration available:

checks:
  frontend_information_disclosure/guessable_cookie_value:
    skip: false # default

Compliance and Standards¶