CVE-2010-4499
First published: Fri Jan 07 2011(Updated: )
Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TIBCO Collaborative Information Manager | <=8.0 | |
| TIBCO ActiveCatalog | <=1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp
- http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt
- http://secunia.com/advisories/42791
- http://www.vupen.com/english/advisories/2011/0037
- http://www.securityfocus.com/bid/45691
- http://www.securitytracker.com/id?1024942
- http://osvdb.org/70374
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64523
Frequently Asked Questions
What is the severity of CVE-2010-4499?
CVE-2010-4499 has a high severity due to its ability to allow attackers to hijack web sessions.
How do I fix CVE-2010-4499?
To fix CVE-2010-4499, you should upgrade TIBCO Collaborative Information Manager to version 8.1.0 or later and TIBCO ActiveCatalog to version 1.0.1 or later.
Which software is affected by CVE-2010-4499?
CVE-2010-4499 affects TIBCO Collaborative Information Manager versions before 8.1.0 and TIBCO ActiveCatalog versions before 1.0.1.
What type of vulnerability is CVE-2010-4499?
CVE-2010-4499 is classified as a session fixation vulnerability.
Can CVE-2010-4499 be exploited remotely?
Yes, CVE-2010-4499 can be exploited remotely by attacking the web sessions of affected users.
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/tibco
- canonical/tibco collaborative information manager
- version/tibco collaborative information manager/8.0
- canonical/tibco activecatalog
- version/tibco activecatalog/1.0