Lucene search
MitreCVELIST:CVE-2010-3893HistoryNov 12, 2010 - 9:00 p.m.
CVE-2010-3893
2010-11-1221:00:00
mitre
www.cve.org
3
The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use of a session ID (aka SID) value to a single IP address, which allows remote attackers to perform arbitrary administrative actions by leveraging cookie theft, related to a “session impersonation” issue.
Related
exploitdb
exploitdb
IBM OmniFind - 'command' Cross-Site Scripting
2010-11-09 00:00:00
cve
cve
CVE-2010-3893
2010-11-12 22:00:02
prion
prion
Session fixation
2010-11-12 22:00:00
nvd
nvd
CVE-2010-3893
2010-11-12 22:00:02
packetstorm
packetstorm
IBM OmniFind Cross Site Scripting / Privilege Escalation
2010-11-10 00:00:00
securityvulns
securityvulns
IBM OmniFind - several vulnerabilities
2010-11-18 00:00:00