CVE-2012-1837

CVE-2012-1837 describes a vulnerability in IBM Tivoli Endpoint Manager (TEM) versions prior to 8.2, specifically affecting the webreports, post/create-role, and post/update-role programs. The flaw stems from the omission of the HTTPOnly flag in a Set-Cookie header, allowing remote attackers to potentially gain sensitive information through script access to these cookies. With a CVSS score of 5.0 (medium severity), this vulnerability has a network attack vector and low attack complexity, but only impacts confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.