Previous Topic: Password Change Links not Embedded in FCC Files use Different Syntax (CQ133285)Next Topic: PASSWORD Attribute Name in FCC Files Requires Uppercase Characters (CQ144053)

Release Notes › Web Agent Release Notes › Defects Fixed › Defects fixed in r12.0 SP3 CR4 through CR7 › Cookie Provider Replay Vulnerability (CQ143685, CQ143669)

Cookie Provider Replay Vulnerability (CQ143685, CQ143669)

Symptom:

The cookie provider was vulnerable to a replay attack.

Solution:

The following agent configuration parameter has been added:

TrackCPSessionDomain

For more information, see the Web Agent Configuration Guide.

STAR Issue: 20354751:01