CVE-2018-1000635

概要

参考情報

• openmicroscopy.org/2018/07/26/omero-5-4-7.html · Patch
• openmicroscopy.org/security/advisories/2018-SV2-script-name-uuid · Vendor Advisory

omero のその他の脆弱性

• CVE-2020-6752低 3.8In OMERO before 5.6.1, group owners can access members' data in other groups.
• CVE-2019-16245中 5.3OMERO before 5.6.1 makes the details of each user available to all users.
• CVE-2014-7198高 8.8OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSRF protection.
• CVE-2018-1000634高 7.2The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management tha…
• CVE-2018-1000633高 7.2The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the log…