CVE:CVE-2014-3092
CNNVD:CNNVD-201409-497
IBM Jazz Team Server是美国IBM公司的一套用于IBM Rational Jazz（团队协作平台）中的项目管理工具。
多款Rational产品中使用的IBM Jazz Team Server中存在安全漏洞，该漏洞源于在https会话中，程序没有为会话cookie设置安全标志。远程攻击者可利用该漏洞捕获cookie。以下产品和版本受到影响：Rational Collaborative Lifecycle Management，Rational Quality Manager 3.0.1.6 iFix 3之前3.x版本，4.0.7之前4.x版本，5.0.1之前5.x版本。
solution:Upgrade ibm rational_doors_next_generation to a higher version than 4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,5.0,and avoid the version 4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,5.0; Upgrade ibm rational_engineering_lifecycle_manager to a higher version than 1.0,1.0.0.1,4.03,4.04,4.05,4.06,5.0,and avoid the version 1.0,1.0.0.1,4.03,4.04,4.05,4.06,5.0; Upgrade ibm rational_quality_manager to a higher version than 2.0,2.0.0.1,2.0.0.2,2.0.1,2.0.1.1,3.0,3.0.1,3.0.1.1,3.0.1.2,3.0.1.3,3.0.1.4,3.0.1.5,3.0.1.6,4.0,4.0.0.1,4.0.0.2,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,5.0,and avoid the version 2.0,2.0.0.1,2.0.0.2,2.0.1,2.0.1.1,3.0,3.0.1,3.0.1.1,3.0.1.2,3.0.1.3,3.0.1.4,3.0.1.5,3.0.1.6,4.0,4.0.0.1,4.0.0.2,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,5.0; Upgrade ibm rational_requirements_composer to a higher version than 2.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,3.0,3.0.1,3.0.1.1,3.0.1.2,3.0.1.3,3.0.1.4,3.0.1.5,3.0.1.6,4.0,4.0.0,4.0.0.1,4.0.0.2,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,and avoid the version 2.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,3.0,3.0.1,3.0.1.1,3.0.1.2,3.0.1.3,3.0.1.4,3.0.1.5,3.0.1.6,4.0,4.0.0,4.0.0.1,4.0.0.2,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6; Upgrade ibm rational_rhapsody_design_manager to a higher version than 3.0,3.0.0.1,3.0.1,4.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,5.0,and avoid the version 3.0,3.0.0.1,3.0.1,4.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,5.0; Upgrade ibm rational_software_architect_design_manager to a higher version than 3.0,3.0.0,3.0.0.1,3.0.1,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,5.0,and avoid the version 3.0,3.0.0,3.0.0.1,3.0.1,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,5.0; Upgrade ibm rational_team_concert to a higher version than 2.0,2.0.0.1,2.0.0.2,3.0,3.0.1,3.0.1.1,3.0.1.2,3.0.1.3,3.0.1.4,3.0.1.5,3.0.1.6,4.0,4.0.0.1,4.0.0.2,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,5.0,and avoid the version 2.0,2.0.0.1,2.0.0.2,3.0,3.0.1,3.0.1.1,3.0.1.2,3.0.1.3,3.0.1.4,3.0.1.5,3.0.1.6,4.0,4.0.0.1,4.0.0.2,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,5.0