#3 Webtune App - Security Misconfiguration - Session Cookies Secure Flag is not set
The secure flag for session cookie 'regginang' is not set. It means that attacker could eavesdrop on the network and acquire the session ID. this session then can be used to access Webtune as legitimate users.
For example, an attacker successfully acquire a session id of an admin '0edlidqd5jae9ro7l4ksqpu6u5'. The attacker set this cookie and then logged in.
