{"api_version":"1","generated_at":"2026-07-23T14:36:48+00:00","cve":"CVE-2018-1000635","urls":{"html":"https://cve.report/CVE-2018-1000635","api":"https://cve.report/api/cve/CVE-2018-1000635.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2018-1000635","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000635"},"summary":{"title":"CVE-2018-1000635","description":"The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full administrative access to server and may be able to disable it. This vulnerability appears to have been fixed in 5.4.7.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2018-08-20 19:31:00","updated_at":"2018-10-12 19:54:00"},"problem_types":["CWE-200"],"metrics":[],"references":[{"url":"https://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html","name":"https://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html","refsource":"CONFIRM","tags":["Patch","Vendor Advisory"],"title":"Release of OMERO 5.4.7 including SECURITY FIX | Open Microscopy Environment (OME)","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.openmicroscopy.org/security/advisories/2018-SV2-script-name-uuid/","name":"https://www.openmicroscopy.org/security/advisories/2018-SV2-script-name-uuid/","refsource":"CONFIRM","tags":["Vendor Advisory"],"title":"Redirecting…","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000635","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000635","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2018","cve_id":"1000635","vulnerable":"1","versionEndIncluding":"5.4.6","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"openmicroscopy","cpe5":"omero","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","DATE_ASSIGNED":"2018-08-19T17:09:33.119039","DATE_REQUESTED":"2018-07-31T16:02:28","ID":"CVE-2018-1000635","REQUESTER":"m.t.b.carroll@dundee.ac.uk","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full administrative access to server and may be able to disable it. This vulnerability appears to have been fixed in 5.4.7."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html","refsource":"CONFIRM","url":"https://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html"},{"name":"https://www.openmicroscopy.org/security/advisories/2018-SV2-script-name-uuid/","refsource":"CONFIRM","url":"https://www.openmicroscopy.org/security/advisories/2018-SV2-script-name-uuid/"}]}},"nvd":{"publishedDate":"2018-08-20 19:31:00","lastModifiedDate":"2018-10-12 19:54:00","problem_types":["CWE-200"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM"},"exploitabilityScore":0.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"severity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:openmicroscopy:omero:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.6","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2018","CveId":"1000635","Ordinal":"132335","Title":"CVE-2018-1000635","CVE":"CVE-2018-1000635","Year":"2018"},"notes":[{"CveYear":"2018","CveId":"1000635","Ordinal":"1","NoteData":"The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full administrative access to server and may be able to disable it. This vulnerability appears to have been fixed in 5.4.7.","Type":"Description","Title":null},{"CveYear":"2018","CveId":"1000635","Ordinal":"2","NoteData":"2018-08-20","Type":"Other","Title":"Published"}]}}}