Unrated severityNVD Advisory· Published Aug 20, 2018· Updated Sep 16, 2024
CVE-2018-1000633
CVE-2018-1000633
Description
The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the login form and change password form that can result in User's password being revealed. Attacker can log in as that user. This attack appear to be exploitable via an attacker reading the web server log. This vulnerability appears to have been fixed in 5.4.7.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.
References
2- www.openmicroscopy.org/2018/07/26/omero-5-4-7.htmlmitrex_refsource_CONFIRM
- www.openmicroscopy.org/security/advisories/2018-SV1-post-password/mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.