CVE-2010-4236

CVE-2010-4236 describes an untrusted search path vulnerability in IBM OmniFind Enterprise Edition before 9.1 via estaskwrapper, where ES_LIBRARY_PATH and PATH are used during execution of estasklight to escalate privileges locally. The affected component is estaskwrapper/estasklight and the root ...