CVE-2010-3897
IBM OmniFind Enterprise Edition 8.x and 9.x - Information Disclosure via ESSearchApplication/palette.do
Title source: llmDescription
ESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the administrator password in the HTML source code, which might allow remote attackers to obtain sensitive information by leveraging read access to this file.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/514688/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/44740
Vendor Advisory x_refsource_misc
http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/2933
Scores
EPSS
0.0124
EPSS Percentile
66.1%
Details
CWE
CWE-255
Status
published
Products (5)
ibm/omnifind
8.0
ibm/omnifind
8.4
ibm/omnifind
8.5
ibm/omnifind
9.0
ibm/omnifind
9.1
Published
Nov 12, 2010
Tracked Since
Feb 18, 2026