CVE-2010-3892

published 2010-11-12

CVE-2010-3892: Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x allows remote attackers to…

medium 6.8 CVSS 3.1

AV N AC M Au N C P I P A P

Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x allows remote attackers to hijack web sessions by replaying a session ID (aka SID) value.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	omnifind	—	—
ibm	omnifind	—	—
ibm	omnifind	—	—
ibm	omnifind	—	—
ibm	omnifind	—	—