CVE-2010-4499: Medium severity TIBCO Collaborative Information Manager vulnerability
Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4499?
CVE-2010-4499 has a high severity due to its ability to allow attackers to hijack web sessions.
How do I fix CVE-2010-4499?
To fix CVE-2010-4499, you should upgrade TIBCO Collaborative Information Manager to version 8.1.0 or later and TIBCO ActiveCatalog to version 1.0.1 or later.
Which software is affected by CVE-2010-4499?
CVE-2010-4499 affects TIBCO Collaborative Information Manager versions before 8.1.0 and TIBCO ActiveCatalog versions before 1.0.1.
What type of vulnerability is CVE-2010-4499?
CVE-2010-4499 is classified as a session fixation vulnerability.
Can CVE-2010-4499 be exploited remotely?
Yes, CVE-2010-4499 can be exploited remotely by attacking the web sessions of affected users.