CVE-2010-4236
EUVD-2010-421012.11.2010, 22:00
Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges via an ES_LIBRARY_PATH environment variable and a modified PATH environment variable, which is used during execution of the estasklight program, a different vulnerability than CVE-2010-3895.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | omnifind | 𝑥 ≤ 9.0 |
| ibm | omnifind | 6.1 |
| ibm | omnifind | 8.0 |
| ibm | omnifind | 8.4 |
| ibm | omnifind | 8.5 |
𝑥
= Vulnerable software versions
References