OMERO before 5.6.1 makes the details of each user available to all users.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NOpenmicroscopy Omero
APPOpenmicroscopy< 5.6.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2014-7198HIGH8.8ten sam produkt
OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSR...
CVE-2018-1000633HIGH7.2ten sam produkt
The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log ...
CVE-2018-1000634HIGH7.2ten sam produkt
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulner...
CVE-2017-1000438HIGH8.3ten sam produkt
In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to a...
CVE-2018-1000635MEDIUM6.7ten sam produkt
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Se...