← Back

CVE-2015-0861

nvd nist
Published: Apr 13, 2016Modified: May 6, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records.

Affected (5)

Tryton
1 product
Trytond
Debian
1 product
Debian Linux
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Tryton
Trytond
From 3.2.0 to 3.2.10
Trytond
From 3.4.0 to 3.4.8
Trytond
From 3.6.0 to 3.6.5
Trytond
From 3.8.0 to 3.8.1
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 8.0

Related CWEs

CWE-264
CWE-264

References (6)

Source: security@debian.org
Vendor Advisory
Source: security@debian.org
Vendor Advisory
Source: security@debian.org
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory

Timeline

No history available yet.