During a security audit, our client found that we are sending to the client a cookie called 'x-oracle-dms-ecid'. They asked to disable it or change its name. We have been reading all the Oracle documentation available, but we couldn't find any useful reference.
So my questions are:
- How can this cookie be changed or disabled?
- What exactly is it used for and what are the possible consequences if we change it?
- Is it really a security incident?