Lucene search

MitreCVE-2010-4499

HistoryJan 07, 2011 - 7:00 p.m.

CVE-2010-4499

2011-01-0719:00:18

mitre

web.nvd.nist.gov

cve-2010-4499

session fixation

tibco collaborative information manager

security vulnerability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

76.4%

JSON

Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors.

Affected configurations

Nvd

Node

tibcoactivecatalogRange≤1.0

tibcocollaborative_information_managerRange≤8.0

VendorProductVersionCPE
tibcoactivecatalog*cpe:2.3:a:tibco:activecatalog:*:*:*:*:*:*:*:*
tibcocollaborative_information_manager*cpe:2.3:a:tibco:collaborative_information_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tibco	activecatalog	*	cpe:2.3:a:tibco:activecatalog::::::::
tibco	collaborative_information_manager	*	cpe:2.3:a:tibco:collaborative_information_manager::::::::

References

osvdb.org/70374

secunia.com/advisories/42791

www.securityfocus.com/bid/45691

www.securitytracker.com/id?1024942

www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt

www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp

www.vupen.com/english/advisories/2011/0037

exchange.xforce.ibmcloud.com/vulnerabilities/64523

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

76.4%

JSON

Related for CVE-2010-4499