PT-2019-9061
CVE-2018-14863
·
Published
2019-04-26
·
Updated
2019-07-05
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Odoo Community versions 8.0 through 11.0
Odoo Enterprise versions 9.0 through 11.0
Description
The issue is related to incorrect access control in the RPC framework, allowing authenticated users to call private functions via RPC.
Recommendations
For Odoo Community versions 8.0 through 11.0, update to a version that includes the fix for the incorrect access control issue.
For Odoo Enterprise versions 9.0 through 11.0, update to a version that includes the fix for the incorrect access control issue.
Found an issue in the description? Have something to add? Feel free to write us 👾