Security Advisory
CVE-2010-3896
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not require authentication, which allows remote attackers to modify the server configuration via a request to palette.do.