CVE-2010-3892

CVE-2010-3892: Session fixation in IBM OmniFind Enterprise Edition (admin interface login form) allows remote attackers to hijack sessions by replaying a server-generated session ID (SID). Affected: IBM OmniFind Enterprise Edition 8.x and 9.x. The provided connected docs confirm the vulnerability...