You can enable the Secure and the HttpOnly flag by updating the following element in web.xml file as below:
The location of web.xml file is :
This version is not affected with this vulnerability and doesn't have this as configuration option.
Element to modify
- You will need to recycle Admin UI service after making the change.