ID CVE-2018-6620
Type cve
Reporter NVD
Modified 2018-02-27T11:13:07
Description
Odoo does not require authentication to be configured for a Backup Database action.
{"id": "CVE-2018-6620", "bulletinFamily": "NVD", "title": "CVE-2018-6620", "description": "Odoo does not require authentication to be configured for a Backup Database action.", "published": "2018-02-04T23:29:00", "modified": "2018-02-27T11:13:07", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-6620", "reporter": "NVD", "references": ["http://asdedc.bid/odoo.html"], "cvelist": ["CVE-2018-6620"], "type": "cve", "lastseen": "2018-02-28T11:58:23", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": [], "cvelist": ["CVE-2018-6620"], "cvss": {"score": 0.0, "vector": "NONE"}, "description": "Odoo does not require authentication to be configured for a Backup Database action.", "edition": 1, "enchantments": {"score": {"modified": "2018-02-05T15:17:00", "value": 4.0}}, "hash": "402bac55c72b6eb0aa2e405cdc2906779168bc968e7ecc1f802899b3fd14c988", "hashmap": [{"hash": "6e224e12a532a7dc2cd76c0e6329a3d4", "key": "title"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "62a10a155ecde1e8831963c9f429d4d5", "key": "cvelist"}, {"hash": "2b559967225d70dc48ca6b5616f5d60b", "key": "description"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "296638b04749b0536e8b6baaf5d208cc", "key": "references"}, {"hash": "f894c60a31c74cc3ccfd2ad8aa1f5376", "key": "href"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "4209eb1176a56072f9154e5f74bd7142", "key": "modified"}, {"hash": "4209eb1176a56072f9154e5f74bd7142", "key": "published"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-6620", "id": "CVE-2018-6620", "lastseen": "2018-02-05T15:17:00", "modified": "2018-02-04T23:29:00", "objectVersion": "1.3", "published": "2018-02-04T23:29:00", "references": ["http://asdedc.bid/odoo.html"], "reporter": "NVD", "scanner": [], "title": "CVE-2018-6620", "type": "cve", "viewCount": 0}, "differentElements": ["cvss", "modified", "cpe"], "edition": 1, "lastseen": "2018-02-05T15:17:00"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "20b6a767b5c883fb1d3ac7097d0157da"}, {"key": "cvelist", "hash": "62a10a155ecde1e8831963c9f429d4d5"}, {"key": "cvss", "hash": "26769fd423968d45be7383413e2552f1"}, {"key": "description", "hash": "2b559967225d70dc48ca6b5616f5d60b"}, {"key": "href", "hash": "f894c60a31c74cc3ccfd2ad8aa1f5376"}, {"key": "modified", "hash": "6e7282a785735fde9b46e2b0f4c0ed96"}, {"key": "published", "hash": "4209eb1176a56072f9154e5f74bd7142"}, {"key": "references", "hash": "296638b04749b0536e8b6baaf5d208cc"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "6e224e12a532a7dc2cd76c0e6329a3d4"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "db3a9b5dadabb3cfe755460ec2690b55e05802b47929e319d75f95d952dc7c08", "viewCount": 1, "enchantments": {"vulnersScore": 4.9}, "objectVersion": "1.3", "cpe": ["cpe:/a:odoo:odoo:-"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}
{"result": {"openvas": [{"id": "OPENVAS:1361412562310812757", "type": "openvas", "title": "Odoo 'Backup Database Action' Authentication Bypass Vulnerability", "description": "The host is running Odoo software and is\n prone to an authentication bypass vulnerability.", "published": "2018-02-08T00:00:00", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:NONE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310812757", "cvelist": ["CVE-2018-6620"], "lastseen": "2018-03-05T11:48:40"}]}}