Lucene search

[email protected]CVE-2010-4499

HistoryJan 07, 2011 - 7:00 p.m.

CVE-2010-4499

2011-01-0719:00:18

[email protected]

web.nvd.nist.gov

cve-2010-4499

session fixation

tibco collaborative information manager

security vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.4%

JSON

Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors.

Affected configurations

NVD

Node

tibcoactivecatalogRange≤1.0

tibcocollaborative_information_managerRange≤8.0

CPENameOperatorVersion
tibco:activecatalogtibco activecatalogle1.0
tibco:collaborative_information_managertibco collaborative information managerle8.0

CPE	Name	Operator	Version
tibco:activecatalog	tibco activecatalog	le	1.0
tibco:collaborative_information_manager	tibco collaborative information manager	le	8.0

References

osvdb.org/70374

secunia.com/advisories/42791

www.securityfocus.com/bid/45691

www.securitytracker.com/id?1024942

www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt

www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp

www.vupen.com/english/advisories/2011/0037

exchange.xforce.ibmcloud.com/vulnerabilities/64523

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.4%

JSON

Related for CVE-2010-4499

prion1 cvelist1 nvd1