PT-2019-9150
CVE-2018-15640
·
Published
2019-04-09
·
Updated
2021-02-08
Description by
CVSS 2.0
9.0
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Odoo Enterprise versions 10.0 through 12.0
Description
The issue is related to improper access control in the Helpdesk App, allowing remote authenticated attackers to gain elevated privileges by sending a crafted request.
Recommendations
For Odoo Enterprise versions 10.0 through 12.0, update to a version that includes a fix for this issue to prevent exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾