IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies.
ibm tivoli endpoint manager 8.0