CVE-2012-0718

4 documents4 sources
Severity
5.4MEDIUM
EPSS
0.2%
top 58.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Tivoli Endpoint Manager
Timeline
PublishedFeb 18
Latest updateJul 19

Description

IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.5

Affected Packages2 packages

🔴Vulnerability Details

3
OSV
libxmltok vulnerabilities↗2022-07-19
▶
GHSA
GHSA-fx43-9328-mjm3: IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies↗2022-04-23
▶
CVEList
CVE-2012-0718: IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies↗2020-02-18
▶
CVE-2012-0718 (MEDIUM CVSS 5.4) | IBM Tivoli Endpoint Manager 8 does | cvebase.io