PT-2011-1584 · Unknown · Tibco Collaborative Information Manager+1

Published 2011-01-07 · Updated 2017-08-17 · CVE-2010-4499

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Collaborative Information Manager server versions prior to 8.1.0 ActiveCatalog versions prior to 1.0.1

Description The issue allows remote attackers to hijack web sessions.

Recommendations For Collaborative Information Manager server versions prior to 8.1.0, update to version 8.1.0 or later. For ActiveCatalog versions prior to 1.0.1, update to version 1.0.1 or later.

Fix

Related Identifiers

CVE-2010-4499

Affected Products

Activecatalog

Tibco Collaborative Information Manager

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2010-4499 · Security Note
• http://tibco.com/multimedia/cim_advisory_20110105_tcm8-12765.txt · Vendor Advisory
• http://vupen.com/english/advisories/2011/0037 · Vendor Advisory
• http://secunia.com/advisories/42791 · Vendor Advisory
• http://tibco.com/services/support/advisories/cim-advisory_20100105.jsp · Vendor Advisory
• http://securitytracker.com/id?1024942 · Note
• http://osvdb.org/70374 · Note
• http://securityfocus.com/bid/45691 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64523 · Note