CVE-2019-11780

Published: Dec 19, 2019Modified: Nov 21, 2024

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.

Affected (2)

Products: Odoo: Odoo

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Odoo Odoo	Version 13.0
Odoo Odoo	Version 13.0

Related CWEs

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://github.com/odoo/odoo/issues/42196

Source: security@odoo.com

PatchThird Party Advisory

https://github.com/odoo/odoo/issues/42196

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.