CVE-2018-1000633
High
Description
The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the login form and change password form that can result in User's password being revealed. Attacker can log in as that user. This attack appear to be exploitable via an attacker reading the web server log. This vulnerability appears to have been fixed in 5.4.7.
SeverityHigh
CVSS7.2
Exploit probability69. percentile1.2%
ProductOpenmicroscopy Omero
PublishedAug 20, 2018
First seenAug 20, 2018
How to fix
Update
- openmicroscopy omero5.4.7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openmicroscopy omero | v < 5.4.7 | 5.4.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.