CVE-2010-4499

Published: Jan 7, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors.

Affected (2)

Products: Tibco: Activecatalog, Collaborative Information Manager

Tibco

2 products

Activecatalog

Collaborative Information Manager

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Tibco Activecatalog	Up to 1.0
Tibco Collaborative Information Manager	Up to 8.0

References (16)

http://osvdb.org/70374

Source: cve@mitre.org

http://secunia.com/advisories/42791

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/45691

Source: cve@mitre.org

http://www.securitytracker.com/id?1024942

Source: cve@mitre.org

http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt

Source: cve@mitre.org

Vendor Advisory

http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0037

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/64523

Source: cve@mitre.org

http://osvdb.org/70374