Common Weakness Enumeration
CWE Definition / CWE-614
CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
The Secure attribute for sensitive cookies in HTTPS sessions is not set.
Published:7 May 2007
Organization:MITRE
Modified:11 Dec 2025
Related Weakness
CWE-319: Cleartext Transmission of Sensitive Information
