CVE-2010-3898

CVE-2010-3898 affects IBM OmniFind Enterprise Edition 8.x and 9.x. The issue is that administrator (ESAdmin) cookies do not have a properly restricted cookie path, which may allow remote attackers to bypass authentication by accessing other pages within the web site. The connected documents confi...