Lucene search

Ubuntu.comUB:CVE-2021-44465

HistoryApr 25, 2023 - 12:00 a.m.

CVE-2021-44465

2023-04-2500:00:00

ubuntu.com

cve-2021-44465

odoo community

odoo enterprise

access control

authenticated attackers

notifications

business records

rpc requests

unix

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

0.0005 Low

EPSS

Percentile

17.5%

JSON

Improper access control in Odoo Community 13.0 and earlier and Odoo
Enterprise 13.0 and earlier allows authenticated attackers to subscribe to
receive future notifications and comments related to arbitrary business
records in the system, via crafted RPC requests.

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchodoo< anyUNKNOWN
ubuntu23.10noarchodoo< anyUNKNOWN
ubuntu24.04noarchodoo< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	odoo	< any	UNKNOWN
ubuntu	23.10	noarch	odoo	< any	UNKNOWN
ubuntu	24.04	noarch	odoo	< any	UNKNOWN

References

github.com/odoo/odoo/issues/107692

launchpad.net/bugs/cve/CVE-2021-44465

nvd.nist.gov/vuln/detail/CVE-2021-44465

security-tracker.debian.org/tracker/CVE-2021-44465

www.cve.org/CVERecord?id=CVE-2021-44465

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

0.0005 Low

EPSS

Percentile

17.5%

JSON

Related for UB:CVE-2021-44465