CVE

Id
70387  
CVE No.
CVE-2014-3092  
Status
Candidate  
Description
IBM Jazz Team Server, as used in Rational Collaborative Lifecycle Management; Rational Quality Manager 3.x before 3.0.1.6 iFix 3, 4.x before 4.0.7, and 5.x before 5.0.1; and other Rational products, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.  
Phase
Assigned (20140429)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
669722 70387 CVE-2014-3092 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21682787  View
669723 70387 CVE-2014-3092 XF:ibm-rclm-cve20143092-cookie(94258)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14251 JVNDB-2014-003126 Android の KeyStore サービスの /system/bin/keystore におけるスタックベースのバッファオーバーフローの脆弱性 Android の KeyStore サービスの /system/bin/keystore 内の encode_key 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-3100 70387 5.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003126.html  View