CVE Daily

CVE-2010-3895

esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to...

High CVSS 7.2

Overview

esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitrary command name as the first argument.

CWE: CWE-264 Published: 2010-11-12T22:00:02.250
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.2 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags