CVE-2012-1837

published 2012-03-22

CVE-2012-1837: The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in…

medium 5 CVSS 3.1

AV N AC L Au N C P I N A N

The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	tivoli_endpoint_manager	<= 8.1	—
ibm	tivoli_endpoint_manager	—	—

CWE-200