Apache HttpOnly Cookie Disclosure

[spalmer]

Hi, I'm new in this forum and I don't speak english very well so sorry for the mistakes.

Today I made a vulnerability scanner with Nessus and I discovered the following vulnerability:

httpOnly Cookie Disclosure (CVE: 2012-0053)

In the website http://www.exploit-db.com/search/ there is an exploit...but I don't have understad why this

vulnerability is dangerous and how I must use this code for an exploit.

Thanks for the answers

[thorin]

https://www.owasp.org/index.php/HttpOnly

[spalmer]

Thanks a lot. I hope to be useful for you in the future. Good day