CVE-2018-14885

2019-06-2817:35:21

mitre

www.cve.org

9.6 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.3%

JSON

Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds.