PT-2012-3581

Name of the Vulnerable Software and Affected Versions IBM Tivoli Endpoint Manager versions prior to 8.2 Description The issue concerns the webreports, post/create-role, and post/update-role programs in IBM Tivoli Endpoint Manager. These programs do not include the HTTPOnly flag in a Set-Cookie...

CVE-2012-1837: Exposure of Sensitive Information to an Unauthorized Actor

The 1 webreports, 2 post/create-role, and 3 post/update-role programs in IBM Tivoli Endpoint Manager TEM before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to thi...