VulnerabilityModified
CVE-2010-4499
Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors.
MEDIUM 4.3EPSS 1.31%
Does this matter?
Lower severity and a low EPSS score (1.31%). Track it; it rarely justifies an emergency change on its own.
Description
Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.31% probability · 69th percentile
- CISA KEV
- Not listed
- Affected
- tibco/activecatalog · tibco/collaborative information manager
- Source
- cve@mitre.org
References
- http://osvdb.org/70374
- http://secunia.com/advisories/42791Vendor Advisory
- http://www.securityfocus.com/bid/45691
- http://www.securitytracker.com/id?1024942
- http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txtVendor Advisory
- http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jspVendor Advisory
- http://www.vupen.com/english/advisories/2011/0037Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64523
- http://osvdb.org/70374
- http://secunia.com/advisories/42791Vendor Advisory
- http://www.securityfocus.com/bid/45691
- http://www.securitytracker.com/id?1024942
- http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txtVendor Advisory
- http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jspVendor Advisory
- http://www.vupen.com/english/advisories/2011/0037Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64523
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.