CVE-2019-11782

Published: Dec 22, 2020Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact management to modify user accounts, leading to privilege escalation.

Affected (2)

Products: Odoo: Odoo

Odoo

1 product

Odoo

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Odoo Odoo	Up to 14.0
Odoo Odoo	Up to 14.0

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://github.com/odoo/odoo/issues/63707

Source: security@odoo.com

Third Party Advisory

https://github.com/odoo/odoo/issues/63707

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.