Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Tivoli Endpoint Manager 信息泄露漏洞
Vulnerability Description
IBM Tivoli Endpoint Manager (TEM) 8.2之前版本中的（1）webreports，（2）post/create-role，（3）post/update-role程序中存在漏洞，该漏洞源于未包含cookie的Set-Cookie头中的HTTPOnly标志。远程攻击者利用该漏洞更易于借助对cookie脚本的访问，获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A