CVE-2018-14863

Name of the Vulnerable Software and Affected Versions Odoo Community versions 8.0 through 11.0 Odoo Enterprise versions 9.0 through 11.0

Description The issue is related to incorrect access control in the RPC framework, allowing authenticated users to call private functions via RPC.

Recommendations For Odoo Community versions 8.0 through 11.0, update to a version that includes the fix for the incorrect access control issue. For Odoo Enterprise versions 9.0 through 11.0, update to a version that includes the fix for the incorrect access control issue.