Cornucopia - Ecommerce Website - SM 4

Suit: Session management

Card/Value: 4

Description:
Alison can set session identification cookies on another web application because the domain and path are not restricted sufficiently.

Technical Note:
There may be reasons to share sessions across multiple applications, but if one of those applications is less secure it might be used to compromise another.

References:
« Previous Card | Session management | Next Card »