Odoo Access Control Issue Vulnerability

Odoo is an Enterprise Resource Planning (ERP) and Customer Relationship Management (CRM) system from Odoo Belgium. The system is developed in Python language, PostgreSQL as the database, and includes modules for sales management, inventory management, financial management and so on. An access control issue vulnerability exists in Odoo, which stems from an improper access control issue that can be exploited by an attacker to receive arbitrary business information in the system by constructing an RPC request.