Cookie Security Flaw in IBM Tivoli Endpoint Manager

CVE-2012-0718

What is CVE-2012-0718?

IBM Tivoli Endpoint Manager 8 is susceptible to a cookie security vulnerability due to the absence of the HttpOnly flag on cookies. This oversight enables attackers to potentially access sensitive session information through cross-site scripting (XSS) attacks. By failing to implement the HttpOnly attribute, the application does not adequately protect cookies from being accessed by malicious scripts, thereby increasing the risk of session hijacking and unauthorized access to user data.

References