PT-2019-9066
CVE-2018-14868
·
تاريخ النشر
2019-06-28
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Odoo Community version 9.0
Odoo Enterprise version 9.0
Description
The issue is related to incorrect access control in the Password Encryption module, allowing authenticated users to change the password of other users without knowing their current password via a crafted RPC call.
Recommendations
For Odoo Community version 9.0, update the Password Encryption module to enforce proper access control.
For Odoo Enterprise version 9.0, update the Password Encryption module to enforce proper access control.
As a temporary workaround, consider restricting access to the Password Encryption module until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾