PEGA-SESSION-COOKIE

General
,
1

Good Day,

We recently ran a security scan and got an alert on the PEGA-SESSION-COOKIE. “The cookie appears to contain a session token, which may increase the risk associated with this issue. You should review the contents of the cookie to determine its function.This issue was found in multiple locations under the reported path.”

Is this cookie being used for maintaining user sessions on the Pega platform?

Thanks

2

Hello @WyattH52,

I am hoping that your environment is on Pega Cloud, as this is a cookie that we use for Pega Cloud environments for session stickiness. This cookie does not contain any sensitive information and is only used for routing the requests to the correct node and does not pose any risk.

We do not use this cookie to maintain the authenticated user sessions.