CVE-2018-1000634 - CVE House
Back to Database
Status published High CVE-2018-1000634

The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains...

Vulnerability Description

The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrictions logging in as a more powerful administrator. This attack appear to be exploitable via Use user administration privilege to set the password of a more powerful administrator. This vulnerability appears to have been fixed in 5.4.7.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-1000634

Credits & Attribution

No credits recorded in the NVD database.

References

More from openmicroscopy

View All →
CVE-2020-7932
OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a...
Medium 5.7
CVE-2020-6752
In OMERO before 5.6.1, group owners can access members' data...
Low 3.8
CVE-2019-9944
In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading...
High 7.5
CVE-2019-9943
In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0,...
High 7.5
CVE-2019-16245
OMERO before 5.6.1 makes the details of each user available...
Medium 5.3

Affected Vendor

openmicroscopy

View all reports →

Affected Software

omero
Vulnerable Versions:
5.4.0

Timeline

Official Publish: August 20th, 2018
Last Modified: September 17th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.