CVE-2018-14885

7.5

HIGHCVSS v2

Published

June 28, 2019

Affected

2 projects

Assigned by

MITRE

Severity scale

010

Description

Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds.

odoo

NPMNode.js client library for Odoo using JSON-RPC

= 10.0, = 11.0NVD

saidimu/odoo

GitHubNode.js client library for Odoo using JSON-RPC

= 10.0, = 11.0NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2018-14885

Description

More on this CVE