Cookie security involves protecting user cookies from unauthorized access and misuse. It includes measures such as using secure cookies over HTTPS and implementing appropriate cookie attributes to prevent script access, ensuring the privacy and integrity of user data.

Check failed

Domain Expires HTTP Cookie HTTP Only Path Same Site Secure Value
online.eximbank.com ASP.NET_SessionId / Lax zpszs3tqdl0wm4t0g5jdeyvk
online.eximbank.com f5avraaaaaaaaaaaaaaaa_session_ JKONBADJEBBECHMJOFFAKFABKLLBFDBAGKGONHLHKGDNLBLNEMJPGIMOJAOOKBGHOLLDJHHNFGEDDKGMGJNALEBFGPMCCHOCHJEEBPMLFPIAADKCFOEMHAKABIPMKGGL
online.eximbank.com f5_cspm 1234
online.eximbank.com TS01c2c3e6 / 01ca91be3502e241d2ddb0d95466588be51bb70ebd3ca661935e04aeb230cf4b942cb2a3d5ef8fce4a75692296d595ab5792f92f6eb28e3dc93edaf5c34b306ebc692222687b523334190c105f54248a3086a9e3117920897e83688b017e482b8d9c0abde4
online.eximbank.com Sun, 14 Mar 2027 22:11:31 GMT visid_incap_3225304 / vHPoXP3aQzGUl1XNnCmrsaz2tWkAAAAAQUIPAAAAAABQlIA1lbOd9PvZ7s2I0Izc
online.eximbank.com incap_ses_789_3225304 / AiyiTiZF6WWSfn4RkxfzCqz2tWkAAAAA8MchfFfsCErHCl4Ty0cwuQ==

Cookies are not secured

The cookies shown uptop are not secured at all, they lack protective measures, rendering them highly susceptible to security threats. This vulnerability exposes users to potential data theft, unauthorized access, and exploitation of web vulnerabilities. Without safeguards like encryption, the HttpOnly flag, and proper SameSite attribute configuration, these cookies can be intercepted, accessed by scripts, and sent in cross-origin requests, making them targets for various attacks, including XSS and CSRF. Extended exposure due to overly long expiration periods and the absence of input validation and secure token handling further compound the risks. Implementing comprehensive security practices is essential to protect cookies and the sensitive data they contain, ensuring a safer online environment.