CVE-2018-14868

4

MEDIUMCVSS v2

Published

June 28, 2019

Affected

2 projects

Assigned by

MITRE

Severity scale

010

Description

Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current password via a crafted RPC call.

odoo

NPMNode.js client library for Odoo using JSON-RPC

= 9.0NVD

saidimu/odoo

GitHubNode.js client library for Odoo using JSON-RPC

= 9.0NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2018-14868

Description

More on this CVE