Apache HTTP Server HttpOnly Cookie Information Disclosure vulnerability detected!

Hi, our server picked up this vulnerability yesterday and there is no information on how to mitigate it on Symantec's website.  Can anyone tell me where this comes from and how to fix it?

We are using SEP 12.1.1000.157 RU1.

Thanks

Dan