Lucene search

[email protected]CVE-2010-4498

HistoryJan 07, 2011 - 7:00 p.m.

CVE-2010-4498

2011-01-0719:00:18

[email protected]

web.nvd.nist.gov

cve-2010-4498

tibco collaborative information manager

activecatalog

remote attackers

data modification

sensitive information

crafted url

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.6%

JSON

Unspecified vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL.

Affected configurations

NVD

Node

tibcoactivecatalogRange≤1.0

tibcocollaborative_information_managerRange≤8.0

CPENameOperatorVersion
tibco:activecatalogtibco activecatalogle1.0
tibco:collaborative_information_managertibco collaborative information managerle8.0

CPE	Name	Operator	Version
tibco:activecatalog	tibco activecatalog	le	1.0
tibco:collaborative_information_manager	tibco collaborative information manager	le	8.0

References

osvdb.org/70373

secunia.com/advisories/42791

www.securityfocus.com/bid/45691

www.securitytracker.com/id?1024942

www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt

www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp

www.vupen.com/english/advisories/2011/0037

exchange.xforce.ibmcloud.com/vulnerabilities/64522

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.6%

JSON

Related for CVE-2010-4498

cvelist1 nvd1 prion1