CVE-2010-3892
5 documents4 sources
Severity
6.8MEDIUM
EPSS
0.6%
top 30.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateMay 14
Description
Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x allows remote attackers to hijack web sessions by replaying a session ID (aka SID) value.
CVSS vector
AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4
Affected Packages1 packages
🔴Vulnerability Details
2GHSA▶
GHSA-qrpc-576w-m89j: Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind Enterprise Edition 8↗2022-05-14
CVEList▶
CVE-2010-3892: Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind Enterprise Edition 8↗2010-11-12