"Session cookie has no SameSite attribute: Session" vulnerability found on Management server R80.40

[LeeBingKang]

Recently, my client ran a VA scan on their R80.40 managment server and found out that is a vulnerability called "Session cookie has no SameSite attribute: Session". I tried to find from internet resources and CheckPoint SK, but no relevant resolution for this issue.

Hence, appreciate if you all can share some suggestions on solving this matter.

Thank you.

[Chris_Atkinson]

Is the machine running a recent jumbo?

Regardless I would suggest engaging TAC with relevant details. 

[LeeBingKang]

Hi @Chris_Atkinson , the machine is not with latest Jumbo Hotfix, but i will install the latest recommended hotfix as it resolved the Slowloris DoS vulnerability.

[Chris_Atkinson]

T180 and higher will help with Slowloris