Lucene search
MitreCVE-2010-3896HistoryNov 12, 2010 - 10:00 p.m.
CVE-2010-3896
2010-11-1222:00:02
CWE-287
mitre
web.nvd.nist.gov
24
cve-2010-3896
ibm omnifind
directory tree
authentication bypass
remote attack
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
Low
EPSS
0.014
Percentile
86.5%
The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not require authentication, which allows remote attackers to modify the server configuration via a request to palette.do.
Affected configurations
Node
ibmomnifindMatch8.0-enterprise
ORibmomnifindMatch8.4-enterprise
ORibmomnifindMatch8.5-enterprise
ORibmomnifindMatch9.0-enterprise
ORibmomnifindMatch9.1-enterprise
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | omnifind | 8.0 | cpe:2.3:a:ibm:omnifind:8.0:-:enterprise:*:*:*:*:* |
| ibm | omnifind | 8.4 | cpe:2.3:a:ibm:omnifind:8.4:-:enterprise:*:*:*:*:* |
| ibm | omnifind | 8.5 | cpe:2.3:a:ibm:omnifind:8.5:-:enterprise:*:*:*:*:* |
| ibm | omnifind | 9.0 | cpe:2.3:a:ibm:omnifind:9.0:-:enterprise:*:*:*:*:* |
| ibm | omnifind | 9.1 | cpe:2.3:a:ibm:omnifind:9.1:-:enterprise:*:*:*:*:* |
Related
nvd
nvd
CVE-2010-3896
2010-11-12 22:00:02
cvelist
cvelist
CVE-2010-3896
2010-11-12 21:00:00
prion
prion
Authentication flaw
2010-11-12 22:00:00
packetstorm
packetstorm
IBM OmniFind Cross Site Scripting / Privilege Escalation
2010-11-10 00:00:00
securityvulns
securityvulns
IBM OmniFind - several vulnerabilities
2010-11-18 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
Low
EPSS
0.014
Percentile
86.5%
Related for CVE-2010-3896