IBM SiteProtector Appliance Information Disclosure Vulnerability

The IBM Security SiteProtector System is a centralized management system from IBM USA, Inc. It is used for unified management and analysis of network, server and desktop endpoint security agents and small networks or devices.A security vulnerability exists in the IBM SiteProtector Appliance that allows remote attackers to exploit the vulnerability to obtain sensitive information, which is caused by the lack of the HttpOnly flag. The vulnerability can be exploited by remote attackers to obtain sensitive information.