CVE-2010-3895

CVE-2010-3895 affects IBM OmniFind Enterprise Edition prior to 9.1. The vulnerability stems from esRunCommand, which allows a local user to escalate privileges by supplying an arbitrary command name as the first argument due to insufficient input handling in the administration/system execution pa...

CVE-2010-3891

IBM OmniFind Enterprise Edition (before 9.1) is affected by CVE-2010-3891: a Cross-Site Request Forgery in ESAdmin/security.do allows an attacker to perform actions in the administrator context, including adding a new admin user via a saveNewUser request, effectively hijacking administrator authe...

CVE-2010-3890

IBM OmniFind Enterprise Edition (pre-9.1) contains multiple vulnerabilities tied to the administration interface. The primary issue CVE-2010-3890 is a Cross-Site Scripting (XSS) flaw where the GET parameter command in ESAdmin/collection.do is embedded into HTML without input validation, enabling ...

CVE-2010-3894

CVE-2010-3894 : IBM OmniFind Enterprise Edition (before 8.5 FP6) has a stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function (libffq.cryptionjni.so) used by the login form in the administration interface. A long password copied into a fixed 2048-byte buffer can ...

CVE-2010-3898

CVE-2010-3898 affects IBM OmniFind Enterprise Edition 8.x and 9.x. The issue is that administrator (ESAdmin) cookies do not have a properly restricted cookie path, which may allow remote attackers to bypass authentication by accessing other pages within the web site. The connected documents confi...

CVE-2010-3892

CVE-2010-3892: Session fixation in IBM OmniFind Enterprise Edition (admin interface login form) allows remote attackers to hijack sessions by replaying a server-generated session ID (SID). Affected: IBM OmniFind Enterprise Edition 8.x and 9.x. The provided connected docs confirm the vulnerability...

CVE-2010-3899

CVE-2010-3899 affects IBM OmniFind Enterprise Edition 8.x and 9.x. The vulnerability is a crawler endless loop caused by unlimited recursion depth in the web crawler, enabling a remote attacker to trigger a denial of service by sending a crafted series of documents. The impact is a DoS due to res...

CVE-2010-3893

The CVE-2010-3893 issue affects IBM OmniFind Enterprise Edition 8.x/9.x, where the session ID (SID) is not bound to an IP address, enabling session impersonation after cookie theft (e.g., via CVE-2010-3890). This allows an attacker to perform administrative actions from any machine reaching the a...

CVE-2010-4236

CVE-2010-4236 describes an untrusted search path vulnerability in IBM OmniFind Enterprise Edition before 9.1 via estaskwrapper, where ES_LIBRARY_PATH and PATH are used during execution of estasklight to escalate privileges locally. The affected component is estaskwrapper/estasklight and the root ...

CVE-2010-3896

CVE-2010-3896 affects IBM OmniFind Enterprise Edition 8.x/9.x. The vulnerability is lack of authentication in the ESSearchApplication area, enabling a remote attacker to modify server configuration via palette.do. The connected advisory set lists related issues (XSS, XSRF, session issues, etc.) a...

CVE-2010-3897

IBM OmniFind Enterprise Edition 8.x/9.x has an issue where the administrator password is embedded in the HTML source of ESSearchApplication/palette.do and transmitted in plaintext over HTTP, allowing an attacker with read access to obtain credentials. The connected documents do not provide a conc...