CVE-2014-3092
Summary
| CVE | CVE-2014-3092 |
|---|---|
| State | PUBLISHED |
| Assigner | ibm |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-09-12 01:55:06 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | IBM Jazz Team Server, as used in Rational Collaborative Lifecycle Management; Rational Quality Manager 3.x before 3.0.1.6 iFix 3, 4.x before 4.0.7, and 5.x before 5.0.1; and other Rational products, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:L/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Rational Doors Next Generation | 4.0.0 | All | All | All |
| Application | Ibm | Rational Doors Next Generation | 4.0.1 | All | All | All |
| Application | Ibm | Rational Doors Next Generation | 4.0.2 | All | All | All |
| Application | Ibm | Rational Doors Next Generation | 4.0.3 | All | All | All |
| Application | Ibm | Rational Doors Next Generation | 4.0.4 | All | All | All |
| Application | Ibm | Rational Doors Next Generation | 4.0.5 | All | All | All |
| Application | Ibm | Rational Doors Next Generation | 4.0.6 | All | All | All |
| Application | Ibm | Rational Doors Next Generation | 5.0 | All | All | All |
| Application | Ibm | Rational Engineering Lifecycle Manager | 1.0 | All | All | All |
| Application | Ibm | Rational Engineering Lifecycle Manager | 1.0.0.1 | All | All | All |
| Application | Ibm | Rational Engineering Lifecycle Manager | 4.03 | All | All | All |
| Application | Ibm | Rational Engineering Lifecycle Manager | 4.04 | All | All | All |
| Application | Ibm | Rational Engineering Lifecycle Manager | 4.05 | All | All | All |
| Application | Ibm | Rational Engineering Lifecycle Manager | 4.06 | All | All | All |
| Application | Ibm | Rational Engineering Lifecycle Manager | 5.0 | All | All | All |
| Application | Ibm | Rational Quality Manager | 2.0 | All | All | All |
| Application | Ibm | Rational Quality Manager | 2.0.0.1 | All | All | All |
| Application | Ibm | Rational Quality Manager | 2.0.0.2 | All | All | All |
| Application | Ibm | Rational Quality Manager | 2.0.1 | All | All | All |
| Application | Ibm | Rational Quality Manager | 2.0.1.1 | All | All | All |
| Application | Ibm | Rational Quality Manager | 3.0 | All | All | All |
| Application | Ibm | Rational Quality Manager | 3.0.1 | All | All | All |
| Application | Ibm | Rational Quality Manager | 3.0.1.1 | All | All | All |
| Application | Ibm | Rational Quality Manager | 3.0.1.2 | All | All | All |
| Application | Ibm | Rational Quality Manager | 3.0.1.3 | All | All | All |
| Application | Ibm | Rational Quality Manager | 3.0.1.4 | All | All | All |
| Application | Ibm | Rational Quality Manager | 3.0.1.5 | All | All | All |
| Application | Ibm | Rational Quality Manager | 3.0.1.6 | All | All | All |
| Application | Ibm | Rational Quality Manager | 4.0 | All | All | All |
| Application | Ibm | Rational Quality Manager | 4.0.0.1 | All | All | All |
| Application | Ibm | Rational Quality Manager | 4.0.0.2 | All | All | All |
| Application | Ibm | Rational Quality Manager | 4.0.1 | All | All | All |
| Application | Ibm | Rational Quality Manager | 4.0.2 | All | All | All |
| Application | Ibm | Rational Quality Manager | 4.0.3 | All | All | All |
| Application | Ibm | Rational Quality Manager | 4.0.4 | All | All | All |
| Application | Ibm | Rational Quality Manager | 4.0.5 | All | All | All |
| Application | Ibm | Rational Quality Manager | 4.0.6 | All | All | All |
| Application | Ibm | Rational Quality Manager | 5.0 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 2.0 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 2.0.0.1 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 2.0.0.2 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 2.0.0.3 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 2.0.0.4 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 3.0 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 3.0.1 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 3.0.1.1 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 3.0.1.2 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 3.0.1.3 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 3.0.1.4 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 3.0.1.5 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 3.0.1.6 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 4.0 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 4.0.0 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 4.0.0.1 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 4.0.0.2 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 4.0.1 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 4.0.2 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 4.0.3 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 4.0.4 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 4.0.5 | All | All | All |
| Application | Ibm | Rational Requirements Composer | 4.0.6 | All | All | All |
| Application | Ibm | Rational Rhapsody Design Manager | 3.0 | All | All | All |
| Application | Ibm | Rational Rhapsody Design Manager | 3.0.0.1 | All | All | All |
| Application | Ibm | Rational Rhapsody Design Manager | 3.0.1 | All | All | All |
| Application | Ibm | Rational Rhapsody Design Manager | 4.0 | All | All | All |
| Application | Ibm | Rational Rhapsody Design Manager | 4.0.1 | All | All | All |
| Application | Ibm | Rational Rhapsody Design Manager | 4.0.2 | All | All | All |
| Application | Ibm | Rational Rhapsody Design Manager | 4.0.3 | All | All | All |
| Application | Ibm | Rational Rhapsody Design Manager | 4.0.4 | All | All | All |
| Application | Ibm | Rational Rhapsody Design Manager | 4.0.5 | All | All | All |
| Application | Ibm | Rational Rhapsody Design Manager | 4.0.6 | All | All | All |
| Application | Ibm | Rational Rhapsody Design Manager | 5.0 | All | All | All |
| Application | Ibm | Rational Software Architect Design Manager | 3.0 | All | All | All |
| Application | Ibm | Rational Software Architect Design Manager | 3.0.0 | All | All | All |
| Application | Ibm | Rational Software Architect Design Manager | 3.0.0.1 | All | All | All |
| Application | Ibm | Rational Software Architect Design Manager | 3.0.1 | All | All | All |
| Application | Ibm | Rational Software Architect Design Manager | 4.0.0 | All | All | All |
| Application | Ibm | Rational Software Architect Design Manager | 4.0.1 | All | All | All |
| Application | Ibm | Rational Software Architect Design Manager | 4.0.2 | All | All | All |
| Application | Ibm | Rational Software Architect Design Manager | 4.0.3 | All | All | All |
| Application | Ibm | Rational Software Architect Design Manager | 4.0.4 | All | All | All |
| Application | Ibm | Rational Software Architect Design Manager | 4.0.5 | All | All | All |
| Application | Ibm | Rational Software Architect Design Manager | 4.0.6 | All | All | All |
| Application | Ibm | Rational Software Architect Design Manager | 5.0 | All | All | All |
| Application | Ibm | Rational Team Concert | 2.0 | All | All | All |
| Application | Ibm | Rational Team Concert | 2.0.0.1 | All | All | All |
| Application | Ibm | Rational Team Concert | 2.0.0.2 | All | All | All |
| Application | Ibm | Rational Team Concert | 3.0 | All | All | All |
| Application | Ibm | Rational Team Concert | 3.0.1 | All | All | All |
| Application | Ibm | Rational Team Concert | 3.0.1.1 | All | All | All |
| Application | Ibm | Rational Team Concert | 3.0.1.2 | All | All | All |
| Application | Ibm | Rational Team Concert | 3.0.1.3 | All | All | All |
| Application | Ibm | Rational Team Concert | 3.0.1.4 | All | All | All |
| Application | Ibm | Rational Team Concert | 3.0.1.5 | All | All | All |
| Application | Ibm | Rational Team Concert | 3.0.1.6 | All | All | All |
| Application | Ibm | Rational Team Concert | 4.0 | All | All | All |
| Application | Ibm | Rational Team Concert | 4.0.0.1 | All | All | All |
| Application | Ibm | Rational Team Concert | 4.0.0.2 | All | All | All |
| Application | Ibm | Rational Team Concert | 4.0.1 | All | All | All |
| Application | Ibm | Rational Team Concert | 4.0.2 | All | All | All |
| Application | Ibm | Rational Team Concert | 4.0.3 | All | All | All |
| Application | Ibm | Rational Team Concert | 4.0.4 | All | All | All |
| Application | Ibm | Rational Team Concert | 4.0.5 | All | All | All |
| Application | Ibm | Rational Team Concert | 4.0.6 | All | All | All |
| Application | Ibm | Rational Team Concert | 5.0 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Bulletin: Security vulnerability in Jazz Team Server affects multiple IBM Rational products based on IBM's Jazz technology (CVE-2014-3092) | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | Patch, Vendor Advisory |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.