CVE-2010-4499 Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to h...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco activecatalog | <= 1.0 | No fix listed |
| tibco collaborative information manager | <= 8.0 | No fix listed |
References
- 70374 vdb-entry
- 42791 third-party-advisory vendor-advisory
- 45691 vdb-entry
- 1024942 vdb-entry
- www.tibco.com vendor-advisory
- www.tibco.com vendor-advisory
- ADV-2011-0037 vdb-entry vendor-advisory
- tibco-unspecified-session-hijacking(64523) vdb-entry