SecuritySpace - CVE-2012-1837

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2012-1837

Description: The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

Test IDs: 1.3.6.1.4.1.25623.1.0.809397

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2012-1837
http://secunia.com/advisories/48352
XForce ISS Database: tem-httponly-weak-security(74038)
https://exchange.xforce.ibmcloud.com/vulnerabilities/74038

CVE ID:	CVE-2012-1837
Description:	The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Test IDs:	1.3.6.1.4.1.25623.1.0.809397
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1837 http://secunia.com/advisories/48352 XForce ISS Database: tem-httponly-weak-security(74038) https://exchange.xforce.ibmcloud.com/vulnerabilities/74038