Attacker Value
Unknown
CVE-2016-0372
Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)User Interaction
Unknown
Privileges Required
Unknown
Attack Vector
Unknown
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Description
IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
None
Impact Score:
Unknown
Exploitability Score:
Unknown
Attack Vector (AV):
Unknown
Attack Complexity (AC):
Unknown
Privileges Required (PR):
Unknown
User Interaction (UI):
Unknown
Scope (S):
Unknown
Confidentiality (C):
Unknown
Integrity (I):
Unknown
Availability (A):
Unknown
General Information
Vendors
Products
- rational collaborative lifecycle management 3.0.1.6,
- rational collaborative lifecycle management 4.0.0,
- rational collaborative lifecycle management 4.0.1,
- rational collaborative lifecycle management 4.0.2,
- rational collaborative lifecycle management 4.0.3,
- rational collaborative lifecycle management 4.0.4,
- rational collaborative lifecycle management 4.0.5,
- rational collaborative lifecycle management 4.0.6,
- rational collaborative lifecycle management 4.0.7,
- rational collaborative lifecycle management 5.0.0,
- rational collaborative lifecycle management 5.0.1,
- rational collaborative lifecycle management 5.0.2,
- rational collaborative lifecycle management 6.0.0,
- rational collaborative lifecycle management 6.0.1,
- rational collaborative lifecycle management 6.0.2,
- rational doors next generation 4.0.0,
- rational doors next generation 4.0.1,
- rational doors next generation 4.0.2,
- rational doors next generation 4.0.3,
- rational doors next generation 4.0.4,
- rational doors next generation 4.0.5,
- rational doors next generation 4.0.6,
- rational doors next generation 4.0.7,
- rational doors next generation 5.0.0,
- rational doors next generation 5.0.1,
- rational doors next generation 5.0.2,
- rational doors next generation 6.0.0,
- rational doors next generation 6.0.1,
- rational doors next generation 6.0.2,
- rational engineering lifecycle manager 4.0.0,
- rational engineering lifecycle manager 4.0.1,
- rational engineering lifecycle manager 4.0.2,
- rational engineering lifecycle manager 4.0.3,
- rational engineering lifecycle manager 4.0.4,
- rational engineering lifecycle manager 4.0.5,
- rational engineering lifecycle manager 4.0.6,
- rational engineering lifecycle manager 4.0.7,
- rational engineering lifecycle manager 5.0.0,
- rational engineering lifecycle manager 5.0.1,
- rational engineering lifecycle manager 5.0.2,
- rational engineering lifecycle manager 6.0.0,
- rational engineering lifecycle manager 6.0.1,
- rational engineering lifecycle manager 6.0.2,
- rational quality manager 3.0.1.6,
- rational quality manager 4.0.0,
- rational quality manager 4.0.1,
- rational quality manager 4.0.2,
- rational quality manager 4.0.3,
- rational quality manager 4.0.4,
- rational quality manager 4.0.5,
- rational quality manager 4.0.6,
- rational quality manager 4.0.7,
- rational quality manager 5.0.0,
- rational quality manager 5.0.1,
- rational quality manager 5.0.2,
- rational quality manager 6.0.0,
- rational quality manager 6.0.1,
- rational quality manager 6.0.2,
- rational rhapsody design manager 4.0,
- rational rhapsody design manager 4.0.1,
- rational rhapsody design manager 4.0.2,
- rational rhapsody design manager 4.0.3,
- rational rhapsody design manager 4.0.4,
- rational rhapsody design manager 4.0.5,
- rational rhapsody design manager 4.0.6,
- rational rhapsody design manager 4.0.7,
- rational rhapsody design manager 5.0.0,
- rational rhapsody design manager 5.0.1,
- rational rhapsody design manager 5.0.2,
- rational rhapsody design manager 6.0.0,
- rational rhapsody design manager 6.0.1,
- rational rhapsody design manager 6.0.2,
- rational software architect design manager 4.0.0,
- rational software architect design manager 4.0.1,
- rational software architect design manager 4.0.2,
- rational software architect design manager 4.0.3,
- rational software architect design manager 4.0.4,
- rational software architect design manager 4.0.5,
- rational software architect design manager 4.0.6,
- rational software architect design manager 4.0.7,
- rational software architect design manager 5.0.0,
- rational software architect design manager 5.0.1,
- rational software architect design manager 5.0.2,
- rational software architect design manager 6.0.0,
- rational software architect design manager 6.0.1,
- rational software architect design manager 6.0.2,
- rational team concert 3.0.1.6,
- rational team concert 4.0.0,
- rational team concert 4.0.1,
- rational team concert 4.0.2,
- rational team concert 4.0.3,
- rational team concert 4.0.4,
- rational team concert 4.0.5,
- rational team concert 4.0.6,
- rational team concert 4.0.7,
- rational team concert 5.0.0,
- rational team concert 5.0.1,
- rational team concert 5.0.2,
- rational team concert 6.0.0,
- rational team concert 6.0.1,
- rational team concert 6.0.2
