CVE-2010-3895 Privilege escalation in n/a

What is CVE-2010-3895?

CVE-2010-3895 is a high-severity vulnerability in n/a, published on 12 Nov 2010. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitrary command name as the first argument.

Weakness: CWE-264

Which versions are affected by CVE-2010-3895?

It affects 1 product.

Products include Ibm Omnifind.

How do I fix CVE-2010-3895?

No fix has been published for CVE-2010-3895 yet. Limit exposure of the affected software until one is available.

Is CVE-2010-3895 being exploited?

There is no known exploitation of CVE-2010-3895 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in n/a

• CVE-2010-3894 Memory corruption in n/a Critical 9.3
• CVE-2010-3893 Auth bypass in n/a High 7.5
• CVE-2010-3896 Missing authorization in n/a High 7.5
• CVE-2010-4236 Privilege escalation in n/a Medium 6.9
• CVE-2010-3891 Cross-site request forgery in n/a Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-rhc9-w9j2-xc59.