Security Bulletin: Security vulnerability in Jazz Team Server affects multiple IBM Rational products based on IBM's Jazz technology (CVE-2014-3092)

Summary A vulnerability in the Jazz Team Server affects the following IBM Rational products: Collaborative Lifecycle Management CLM, Rational Requirements Composer RRC, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager RELM, Rhapsody Design Manager Rhapsody DM, Rational...

Security Bulletin: Security vulnerability in Jazz Team Server affects Rational Insight (CVE-2014-3092)

Summary A vulnerability in the Jazz Team Server affects the Rational Insight, in the areas of Data Collection Component and Jazz Reporting Service. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more...

CVE-2014-3092

CVE-2014-3092 affects IBM Jazz Team Server-based products (e.g., Rational CLM suite, RQM, RTC, RRC, RDNG, RELM, Rhapsody DM, RSA DM) where the session cookie is not marked Secure in HTTPS, enabling potential cookie leakage over HTTP. The root cause is the cookie’s missing Secure flag during SSL s...