CVE-2010-4499

MEDIO 4.3CVE-2010-4499 · Published 07/01/2011 · updated 16/06/2026

En resumen

CVE-2010-4499 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a activecatalog (tibco), collaborative information manager (tibco).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 70.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
activecatalog tibco	`≤ 1.0`	No fix yet
collaborative information manager tibco	`≤ 8.0`	No fix yet

Description

Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors.

References

osvdb.org/70374
secunia.com/advisories/42791 · Vendor Advisory
securityfocus.com/bid/45691
securitytracker.com/id
tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt · Vendor Advisory
tibco.com/services/support/advisories/cim-advisory_20100105.jsp · Vendor Advisory
vupen.com/english/advisories/2011/0037 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/64523

Más vulnerabilidades de activecatalog

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free