< 1.15
1.15
Cerebrate before 1.15 lacks the Secure attribute for the session cookie.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.