CVE-2018-14859

5.5

MEDIUMCVSS v2

Published

July 3, 2019

Affected

2 projects

Assigned by

MITRE

Severity scale

010

Description

Incorrect access control in the password reset component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated users to reset the password of other users by being the first party to use the secure token.

odoo

NPMNode.js client library for Odoo using JSON-RPC

= 9.0, = 10.0, = 11.0NVD

saidimu/odoo

GitHubNode.js client library for Odoo using JSON-RPC

= 9.0, = 10.0, = 11.0NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2018-14859

Description

More on this CVE