CVE-2018-1000635 - CVE House
Back to Database
Status published Medium CVE-2018-1000635

The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains...

Vulnerability Description

The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full administrative access to server and may be able to disable it. This vulnerability appears to have been fixed in 5.4.7.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-1000635

Credits & Attribution

No credits recorded in the NVD database.

References

More from openmicroscopy

View All →
CVE-2020-7932
OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a...
Medium 5.7
CVE-2020-6752
In OMERO before 5.6.1, group owners can access members' data...
Low 3.8
CVE-2019-9944
In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading...
High 7.5
CVE-2019-9943
In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0,...
High 7.5
CVE-2019-16245
OMERO before 5.6.1 makes the details of each user available...
Medium 5.3

Affected Vendor

openmicroscopy

View all reports →

Affected Software

omero
Vulnerable Versions:
5.4.0

Timeline

Official Publish: August 20th, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.