A new directive from CERT warns that inadequately secure cookie authorisation opens up an attack vector for secure websites, with all modern browsers vulnerable.
Source: Cookies can facilitate attacks on secure web sites