Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2010-3898
HistoryNov 12, 2010 - 9:00 p.m.

CVE-2010-3898

2010-11-1221:00:00
mitre
www.cve.org
2

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

61.4%

JSON

IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of administrator (aka ESAdmin) cookies, which might allow remote attackers to bypass authentication by leveraging access to other pages on the web site.

Related

nvd 1
prion 1
cve 1
packetstorm 1
securityvulns 2
nvd
nvd
CVE-2010-3898
2010-11-12 22:00:02
prion
prion
Authentication flaw
2010-11-12 22:00:00
cve
cve
CVE-2010-3898
2010-11-12 22:00:02
packetstorm
packetstorm
IBM OmniFind Cross Site Scripting / Privilege Escalation
2010-11-10 00:00:00
securityvulns
securityvulns
IBM OmniFind - several vulnerabilities
2010-11-18 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2010-11-18 00:00:00

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

61.4%

JSON
Related for CVELIST:CVE-2010-3898
nvd1prion1cve1packetstorm1securityvulns2