CVE-2018-1000633
NONE EPSS 64.9%
Published Aug 20, 20187y ago · Modified Jun 17, 20262w ago
Published Aug 20, 2018 7y ago
Last Modified Jun 17, 2026 2w ago
Description
The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the login form and change password form that can result in User's password being revealed. Attacker can log in as that user. This attack appear to be exploitable via an attacker reading the web server log. This vulnerability appears to have been fixed in 5.4.7.
Threat Intelligence
EPSS Exploit Probability
64.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor Information Exposure
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| openmicroscopy | omero | * | <5.4.7 |
References 2
- openmicroscopy.org http://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html
- openmicroscopy.org http://www.openmicroscopy.org/security/advisories/2018-SV1-post-password/
Remediation
- openmicroscopy.org http://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html