CVE-2018-14861

Name of the Vulnerable Software and Affected Versions Odoo Community versions 10.0 through 11.0 Odoo Enterprise versions 10.0 through 11.0

Description The issue is related to improper data access control, allowing authenticated users to export secure hashed passwords of other users via a CSV export.

Recommendations For Odoo Community versions 10.0 through 11.0, update to a version that includes the necessary access control fixes to prevent unauthorized data exports. For Odoo Enterprise versions 10.0 through 11.0, apply the security patch that addresses the improper data access control to restrict authenticated users from accessing sensitive user data.