VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 12, 2010· Updated Apr 29, 2026

CVE-2010-3898

CVE-2010-3898

Description

IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of administrator (aka ESAdmin) cookies, which might allow remote attackers to bypass authentication by leveraging access to other pages on the web site.

Affected products

5
  • IBM/Omnifind5 versions
    cpe:2.3:a:ibm:omnifind:8.0:-:enterprise:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:omnifind:8.0:-:enterprise:*:*:*:*:*
    • cpe:2.3:a:ibm:omnifind:8.4:-:enterprise:*:*:*:*:*
    • cpe:2.3:a:ibm:omnifind:8.5:-:enterprise:*:*:*:*:*
    • cpe:2.3:a:ibm:omnifind:9.0:-:enterprise:*:*:*:*:*
    • cpe:2.3:a:ibm:omnifind:9.1:-:enterprise:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.