In Openshift Origin 3 the cookies being set in console have no βsecureβ, βHttpOnlyβ attributes.
[
{
"product": "Openshift Origin",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Openshift Origin 3"
}
]
}
]