| Package | Affected versions | Patched versions |
|---|---|---|
| omnifind | = 6.1= 8.0= 8.4= 8.5≤ 9.0 |
Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges via an ES_LIBRARY_PATH environment variable and a modified PATH environment variable, which is used during execution of the estasklight program, a different vulnerability than CVE-2010-3895.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free