CVE-2010-4498
First published: Fri Jan 07 2011(Updated: )
Unspecified vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TIBCO ActiveCatalog | <=1.0 | |
| TIBCO Collaborative Information Manager | <=8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt
- http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp
- http://secunia.com/advisories/42791
- http://www.securityfocus.com/bid/45691
- http://www.vupen.com/english/advisories/2011/0037
- http://www.securitytracker.com/id?1024942
- http://osvdb.org/70373
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64522
Frequently Asked Questions
What is the severity of CVE-2010-4498?
CVE-2010-4498 is considered a high severity vulnerability due to its potential to allow remote attackers to modify data and access sensitive information.
How do I fix CVE-2010-4498?
To fix CVE-2010-4498, users should upgrade to TIBCO Collaborative Information Manager 8.1.0 or later and TIBCO ActiveCatalog 1.0.1 or later.
Which software is affected by CVE-2010-4498?
CVE-2010-4498 affects TIBCO Collaborative Information Manager versions prior to 8.1.0 and TIBCO ActiveCatalog versions prior to 1.0.1.
What can attackers do with CVE-2010-4498?
Attackers exploiting CVE-2010-4498 can modify data or obtain sensitive information through crafted URLs.
Is there a way to mitigate CVE-2010-4498 without upgrading?
There are no effective mitigations for CVE-2010-4498 without upgrading to the patched software versions.
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/tibco
- canonical/tibco activecatalog
- version/tibco activecatalog/1.0
- canonical/tibco collaborative information manager
- version/tibco collaborative information manager/8.0