IBM Jazz Team Server, as used in Rational Collaborative Lifecycle Management; Rational Quality Manager 3.x before 3.0.1.6 iFix 3, 4.x before 4.0.7, and 5.x before 5.0.1; and other Rational products, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2014-09-12T01:00:00

Updated: 2024-08-06T10:35:55.834Z

Reserved: 2014-04-29T00:00:00

Link: CVE-2014-3092

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2014-09-12T01:55:06.810

Modified: 2017-08-29T01:34:39.060

Link: CVE-2014-3092

cve-icon Redhat

No data.