CVE-2010-4499

EPSS 0.55%
Veröffentlicht 07.01.2011 19:00:18
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Tibco ≫ Activecatalog Version <= 1.0

Tibco ≫ Collaborative Information Manager Version <= 8.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.55%	0.651

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://secunia.com/advisories/42791

Vendor Advisory

http://www.securityfocus.com/bid/45691

http://www.securitytracker.com/id?1024942

http://www.tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt

Vendor Advisory

http://www.tibco.com/services/support/advisories/cim-advisory_20100105.jsp

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0037

Vendor Advisory

http://osvdb.org/70374

https://exchange.xforce.ibmcloud.com/vulnerabilities/64523

https://nvd.nist.gov/vuln/detail/CVE-2010-4499

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-4499

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-4499

EUVD