CVE-2014-3092

Name of the Vulnerable Software and Affected Versions IBM Jazz Team Server versions prior to 3.0.1.6 iFix 3 Rational Quality Manager versions 3.x before 3.0.1.6 iFix 3 Rational Quality Manager versions 4.x before 4.0.7 Rational Quality Manager versions 5.x before 5.0.1

Description The issue allows remote attackers to capture session cookies by intercepting their transmission within an http session, as the secure flag for the session cookie in an https session is not set.

Recommendations For IBM Jazz Team Server versions prior to 3.0.1.6 iFix 3, update to version 3.0.1.6 iFix 3 or later. For Rational Quality Manager versions 3.x before 3.0.1.6 iFix 3, update to version 3.0.1.6 iFix 3 or later. For Rational Quality Manager versions 4.x before 4.0.7, update to version 4.0.7 or later. For Rational Quality Manager versions 5.x before 5.0.1, update to version 5.0.1 or later.