CWE-539
Use of Persistent Cookies Containing Sensitive Information
The web application uses persistent cookies, but the cookies contain sensitive information.
Impactr finds and proves whether CWE-539 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.