Rule Definition
If read access is not properly restricted, then attackers can steal the sensitive information. If write access is not properly restricted, then attackers can modify and possibly delete the data, causing incorrect results and possibly a denial of service.

Remediation
Do not provide a domain with wildcard access

Violation Code Sample

class CookieWithOverlyBroadDomain
{
    static public void AddCookie()
    {
        HttpCookie cookie = new HttpCookie("sessionID");
        cookie.Domain = "*.example.com";
    }
}

Fixed Code Sample

class CookieWithOverlyBroadDomain
{
    static public void AddCookie()
    {
        HttpCookie cookie = new HttpCookie("sessionID");
        cookie.Domain = "secure.example.com";
    }
}

https://cwe.mitre.org/data/definitions/287.html https://www.owasp.org/index.php/Top_10-2017_A3-Sensitive_Data_Exposure OWASP Top 10 2007 -A6 Information Leakage and Improper Error Handling OWASP Top 10 2010 -A6-Security Misconfiguration OWASP Top 10 2013 -A6-Sensitive Data Exposure OWASP Top 10 2017 -A3-Sensitive Data Exposure