CVE-2018-14868

Published June 28th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

MEDIUM

Affected

PROJECT

Description

Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current password via a crafted RPC call.

odoo/odoo

Odoo. Open Source Apps To Grow Your Business.

GitHub

52.4K