CVE Feed

    Dashboard / CVE / CVE-2018-1000634

    CVE-2018-1000634

    The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrictions logging in as a more powerful administrator. This attack appear to be exploitable via Use user administration privilege to set the password of a more powerful administrator. This vulnerability appears to have been fixed in 5.4.7.

    Published:Aug 20, 2018
    Last Modified:Nov 21, 2024
    EPS:Aug 20, 2018
    EPSS Score:0.00273
    CVSS Score:7.2

    Affected Products

    Vendor
    Openmicroscopy
    Product
    Omero

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-269 Improper Privilege Management

    Related CVEs

    CVE-2020-6752 (CVSS 3.8) — In OMERO before 5.6.1, group owners can access members' data in other groups.…
    CVE-2019-16245 (CVSS 5.3) — OMERO before 5.6.1 makes the details of each user available to all users.…
    CVE-2014-7198 (CVSS 8.8) — OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSR…
    CVE-2018-1000635 (CVSS 6.7) — The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Se…
    CVE-2018-1000633 (CVSS 7.2) — The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log …
    CVE-2017-1000438 (CVSS 8.3) — In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High