During a security audit, our cliente found that we are sending to the cliente a cookie called ‘x-oracle-dms-ecid’. They asked to disable it or change its name. We have been reading all the Oracle documentation avaliable, but we couldn’t find any useful reference.
So my questions are:
- How can this cookie be changed or disabled?
- What is exactly used for and what are the possible consequences if we change it?
- It’s really a security incident?