LotusScript : Cookie: unlimited expiration time

The application uses persistent cookies. Storing valuable data in persistent cookies may result in loss of its confidentiality.

In most cases, cookies are non-persistent by default. That means cookies are not stored on disk and are deleted when the browser is closed. The developer can define certain cookies to be persistent, in which case they are written to disk and stored between browser and computer restarts.

If valuable data is stored in persistent cookies, an attacker has more time to get access to it.

Sensitive Data Exposure vulnerabilities take the third place in the “OWASP Top 10 2017” web-application vulnerabilities ranking.