CVE-2018-1000634
NONE EPSS 57.4%
Published Aug 20, 20187y ago · Modified Jun 17, 20262w ago
Published Aug 20, 2018 7y ago
Last Modified Jun 17, 2026 2w ago
Description
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrictions logging in as a more powerful administrator. This attack appear to be exploitable via Use user administration privilege to set the password of a more powerful administrator. This vulnerability appears to have been fixed in 5.4.7.
Threat Intelligence
EPSS Exploit Probability
57.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-269 Improper Privilege Management Authorization
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| openmicroscopy | omero | * | ≥5.4.0 – ≤5.4.6 |
References 2
- openmicroscopy.org https://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html
- openmicroscopy.org https://www.openmicroscopy.org/security/advisories/2018-SV3-modify-user-password/
Remediation
- openmicroscopy.org https://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html