Description
Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x allows remote attackers to hijack web sessions by replaying a session ID (aka SID) value.
References
- 20101109 IBM OmniFind - several vulnerabilities mailing-list
- 44740 vdb-entry
- http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt
- ADV-2010-2933 vdb-entry