CVEvulnerability
CVE-2010-4499
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-01-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors.
Affected configurations
• tibco activecatalog (<= 1.0)
• tibco collaborative information manager (<= 8.0)
References
- http://osvdb.org/70374 osvdb.org
- http://secunia.com/advisories/42791 Vendor Advisory
- http://www.securityfocus.com/bid/45691 www.securityfocus.com
- http://www.securitytracker.com/id?1024942 www.securitytracker.com
- http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt Vendor Advisory
- http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0037 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64523 exchange.xforce.ibmcloud.com
- http://osvdb.org/70374 osvdb.org
- http://secunia.com/advisories/42791 Vendor Advisory
- http://www.securityfocus.com/bid/45691 www.securityfocus.com
- http://www.securitytracker.com/id?1024942 www.securitytracker.com
- http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt Vendor Advisory
- http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0037 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64523 exchange.xforce.ibmcloud.com