PT-2018-9488 · Open Microscopy Environment · Omero.Server

Publicado 2018-08-20 · Atualizado 2018-10-12 · CVE-2018-1000635

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OMERO.server versions 5.4.0 through 5.4.6

Description The issue is related to Information Exposure Through Sent Data in OMERO.server, which can allow an attacker to gain full administrative access to the server and potentially disable it.

Recommendations For OMERO.server versions 5.4.0 through 5.4.6, update to version 5.4.7 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-1000635

Produtos afetados

Omero.Server

Referências · 4

• https://openmicroscopy.org/2018/07/26/omero-5-4-7.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000635 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1000635 · Aviso do Fabricante
• https://openmicroscopy.org/security/advisories/2018-SV2-script-name-uuid · Aviso do Fabricante