Severity: : Medium

  DESCRIPTION

Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly restrict access from web pages to Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls.

  INFORMATION EXPOSURE

Apply associated live casino online DPI Rules.

  SOLUTION

  live casino online Deep Security DPI Rule Number: 1007951