MEDIUM🇬🇧 English

CVE-2018-1000635

CVSS 6.7v3.0pub. 2018-08-20upd. 2024-11-21

The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full administrative access to server and may be able to disable it. This vulnerability appears to have been fixed in 5.4.7.

oryginał EN
CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  • Openmicroscopy Omero

    APP
    Openmicroscopy
    5.4.0 – 5.4.6
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2014-7198HIGH8.8ten sam produkt

OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSR...

CVE-2018-1000633HIGH7.2ten sam produkt

The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log ...

CVE-2018-1000634HIGH7.2ten sam produkt

The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulner...

CVE-2017-1000438HIGH8.3ten sam produkt

In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to a...

CVE-2019-16245MEDIUM5.3ten sam produkt

OMERO before 5.6.1 makes the details of each user available to all users.