Cookie Overly Broad Path Detected

[pgnair]

Is your application installed to respond to some domain wide request, like https://yourcompany.com ??

If so, the cookie must be using the root application path, otherwise there is no way to use it to the main URL address... are you sure these auditors know what they are doing?

yes the URL is is https://collection.XXXXXX.com.
where is this path is setting?
I asked about this to the  auditors and what they advised is we must do it in the application itself.