Описание
The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not require authentication, which allows remote attackers to modify the server configuration via a request to palette.do.
Ссылки
- Exploit
- Vendor Advisory
- Exploit
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ibm:omnifind:8.0:-:enterprise:*:*:*:*:*
cpe:2.3:a:ibm:omnifind:8.4:-:enterprise:*:*:*:*:*
cpe:2.3:a:ibm:omnifind:8.5:-:enterprise:*:*:*:*:*
cpe:2.3:a:ibm:omnifind:9.0:-:enterprise:*:*:*:*:*
cpe:2.3:a:ibm:omnifind:9.1:-:enterprise:*:*:*:*:*
EPSS
Процентиль: 73%
0.00769
Низкий
7.5 High
CVSS2
Дефекты
CWE-287
Связанные уязвимости
github
больше 3 лет назад
The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not require authentication, which allows remote attackers to modify the server configuration via a request to palette.do.
EPSS
Процентиль: 73%
0.00769
Низкий
7.5 High
CVSS2
Дефекты
CWE-287