What is CVE-2019-9943?

CVE-2019-9943 is a high-severity vulnerability in Openmicroscopy Omero.server, classified under Incorrect Default Permissions. CVSS score: 7.5/10. Published 2020-06-17.

How severe is CVE-2019-9943?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Openmicroscopy Omero.server

CVE-2019-9943

In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMERO model objects may be circumvented during certain operations such as move and delete, because group permissions are mishandled.

EPSS: 0.008 (53.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Openmicroscopy Omero.server
N/a — versions n/a

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-9943?: CVE-2019-9943 is a high-severity vulnerability in Openmicroscopy Omero.server, classified under Incorrect Default Permissions. CVSS score: 7.5/10. Published 2020-06-17.
How severe is CVE-2019-9943?: High severity. CVSS v3 base score is 7.5 out of 10.