Design/Logic Flaw

adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag...