CVE-2018-1000633

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.22%

Published

Aug 20, 2018

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the login form and change password form that can result in User's password being revealed. Attacker can log in as that user. This attack appear to be exploitable via an attacker reading the web server log. This vulnerability appears to have been fixed in 5.4.7.

Weaknesses (CWE)

CWE-200

Affected Products (1)

openmicroscopy · omero (up to 5.4.7)vulnerable

References (4)

http://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html

PatchVendor Advisory

http://www.openmicroscopy.org/security/advisories/2018-SV1-post-password/

Vendor Advisory

http://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html

PatchVendor Advisory

http://www.openmicroscopy.org/security/advisories/2018-SV1-post-password/

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs