Insecure Cookies

concrete5/concrete5 is vulnerable to Insecure Cookies. The vulnerability exists in controller.php because the ccmPoll cookie parameters do not have secure and http only attributes which allows an attacker to gain access to session and perform unauthorized actions...