CVE-2012-0215: Medium severity tryton trytond vulnerability
model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via a (1) create, (2) write, (3) delete, or (4) copy rpc call.
Other sources
model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via a (1) create, (2) write, (3) delete, or (4) copy rpc call.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0215?
CVE-2012-0215 has a medium severity rating due to improper access control that allows unauthorized modification of user privileges.
How do I fix CVE-2012-0215?
To fix CVE-2012-0215, upgrade the Tryton application framework (trytond) to version 2.4.0 or later.
Which versions of trytond are affected by CVE-2012-0215?
CVE-2012-0215 affects trytond versions up to and including 2.2.3, as well as certain specific versions including 1.4.13, 1.6.8, 1.8.7, and 2.0.5.
What type of vulnerability is CVE-2012-0215?
CVE-2012-0215 is an access control vulnerability that allows authenticated remote users to change the privileges of arbitrary users.
Is CVE-2012-0215 a local or remote vulnerability?
CVE-2012-0215 is considered a remote vulnerability because it can be exploited by authenticated users over the network.