Lucene search
MitreCVE-2010-3897HistoryNov 12, 2010 - 10:00 p.m.
CVE-2010-3897
2010-11-1222:00:02
CWE-255
mitre
web.nvd.nist.gov
22
ibm
omnifind
cve-2010-3897
password exposure
security vulnerability
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.9
Confidence
Low
EPSS
0.003
Percentile
70.2%
ESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the administrator password in the HTML source code, which might allow remote attackers to obtain sensitive information by leveraging read access to this file.
Affected configurations
Node
ibmomnifindMatch8.0-enterprise
ORibmomnifindMatch8.4-enterprise
ORibmomnifindMatch8.5-enterprise
ORibmomnifindMatch9.0-enterprise
ORibmomnifindMatch9.1-enterprise
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | omnifind | 8.0 | cpe:2.3:a:ibm:omnifind:8.0:-:enterprise:*:*:*:*:* |
| ibm | omnifind | 8.4 | cpe:2.3:a:ibm:omnifind:8.4:-:enterprise:*:*:*:*:* |
| ibm | omnifind | 8.5 | cpe:2.3:a:ibm:omnifind:8.5:-:enterprise:*:*:*:*:* |
| ibm | omnifind | 9.0 | cpe:2.3:a:ibm:omnifind:9.0:-:enterprise:*:*:*:*:* |
| ibm | omnifind | 9.1 | cpe:2.3:a:ibm:omnifind:9.1:-:enterprise:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2010-11-12 22:00:00
cvelist
cvelist
CVE-2010-3897
2010-11-12 21:00:00
nvd
nvd
CVE-2010-3897
2010-11-12 22:00:02
packetstorm
packetstorm
IBM OmniFind Cross Site Scripting / Privilege Escalation
2010-11-10 00:00:00
securityvulns
securityvulns
IBM OmniFind - several vulnerabilities
2010-11-18 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.9
Confidence
Low
EPSS
0.003
Percentile
70.2%
Related for CVE-2010-3897