Improper access control

2019-06-2818:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.3%

JSON

Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds.

CPENameOperatorVersion
odooeq10.0
odooeq10.0
odooeq11.0
odooeq11.0

Name	Operator	Version
odoo	eq	10.0
odoo	eq	10.0
odoo	eq	11.0
odoo	eq	11.0

References

github.com/odoo/odoo/commits/master

github.com/odoo/odoo/issues/32512