While using postman – you would need to override the origin header with the exact domain name you have set in cors setting page with full-access or domain name of your CUC . something like origin : https://servername.domain.com
Fabien ,Team is still working on issue , they have been able to re-create in lab and investigating if there is a workaround .Will get back to you when i have further updatesthanks