Security Cookies can render secure websites vulnerable in all modern browsers

[J65nko]

From https://thestack.com/security/2015/0...dern-browsers/ :

CERT have issued a new directive notifying that cookies can be used to allow remote attackers to bypass a secure protocol (HTTPS) and reveal private session information – and that modern browsers, including Apple’s Safari, Mozilla’s Firefox and Google’s Chrome, currently provide no protection against the attack vector. Research indicates that secure sites as important as Google and the Bank of America are vulnerable to the technique.

[bsd-keith]

So, cookies aren't so innocent after all.

[e1-531g]

In Firefox I always set "Accept third-party cookies" to Never.
It reflects Network.cookie.cookieBehavior option in about:config.
Does this bug also affects me considering these config options?