CVEvulnerability
CVE-2010-3897
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-11-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
ESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the administrator password in the HTML source code, which might allow remote attackers to obtain sensitive information by leveraging read access to this file.
Affected configurations
• ibm omnifind 8.0
• ibm omnifind 8.4
• ibm omnifind 8.5
• ibm omnifind 9.0
• ibm omnifind 9.1
Related
Weakness · not in database (1)
References
- http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt security.fatihkilic.de
- http://www.securityfocus.com/archive/1/514688/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/44740 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/2933 Vendor Advisory
- http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt security.fatihkilic.de
- http://www.securityfocus.com/archive/1/514688/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/44740 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/2933 Vendor Advisory