CVE-2019-9943

Publication date

2020-06-17 16:12:42

Family

mitre

State

PUBLISHED

Description

In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMERO model objects may be circumvented during certain operations such as move and delete, because group permissions are mishandled.