CVE-2018-1000634

HIGH

The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restri...

Affects 1 product across 1 vendor.

CVSS 3.07.2
EPSS1.0%
Percentile61th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, high privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-269: Improper Privilege Management

Software does not properly assign, modify, track, or check privileges, allowing unauthorized elevation of access.

Related Attack Patterns (CAPEC)
CAPEC-58 Restful Privilege Elevation
via CWE-269
CAPEC-122 Privilege Abuse
via CWE-269
CAPEC-233 Privilege Escalation
via CWE-269

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2018. A high severity vulnerability affects Openmicroscopy systems (CVE-2018-1000634). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2018-GLOBAL-122355-H • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2018-1000634?
This vulnerability was disclosed in 2018. A high severity vulnerability affects Openmicroscopy systems (CVE-2018-1000634). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2018-1000634?
CVE-2018-1000634 has CVSS 7.2 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS: 1.0%.
Is CVE-2018-1000634 actively exploited?
No confirmed active exploitation of CVE-2018-1000634 as of 2026-05-30.
How do I remediate CVE-2018-1000634?
Priority: MEDIUM. Advisory: https://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html PSIRT: [email protected]
What systems are affected by CVE-2018-1000634?
CVE-2018-1000634 affects Openmicroscopy Omero.
Vulnerability Details
CVE IDCVE-2018-1000634
BSIDBS-2018-GLOBAL-122355-H BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Published2018-08-20
Last Modified2024-11-21
ICS Relevance15%
Weakness (CWE)
Improper Privilege Management
SourceNVD
Official Description

The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrictions logging in as a more powerful administrator. This attack appear to be exploitable via Use user administration privilege to set the password of a more powerful administrator. This vulnerability appears to have been fixed in 5.4.7.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrictions logging in as a more powerful administrator. This attack appear to be exploitable via Use user administration privilege to set the password of a more powerful administrator. This vulnerability appears to have been fixed in 5.4.7. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Openmicroscopy Omero ≥ 5.4.0, ≤ 5.4.6
Remediation
View Vendor Advisory →

Remediation Priority: MEDIUM

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2978 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashce45607ca5bd7cdbab76b68fbc568dafd16bb5efc1c0c59426a4e5550808cfdb56d66c2e211b9fadbc7798b53f89020e3fa336b50a875b176f3fd8a2d598bfca
Related CVEs affecting Openmicroscopy
CVE-2019-16244 9.8 OMERO.server before 5.6.1 allows attackers to bypass the security filters and... CVE-2014-7198 8.8 OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework fo... CVE-2017-1000438 8.3 In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its ... CVE-2026-22187 7.8 Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserializ... CVE-2019-9944 7.5 In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading ...
View all Openmicroscopy CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →