CVE-2018-14861: Medium severity odoo vulnerability

Published Jul 3, 2019

Updated

Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users.

Affected Software

4 affected components

Odoo=10.0

Odoo=11.0

Remediation

Patch Available

https://github.com/odoo/odoo/issues/32506

Event History

Jul 3, 2019

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is CVE-2018-14861?

CVE-2018-14861 is a vulnerability in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 that allows authenticated users to perform a CSV export of the secure hashed passwords of other users.

Who is affected by CVE-2018-14861?

Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 are affected by CVE-2018-14861.

How severe is CVE-2018-14861?

CVE-2018-14861 has a severity level of medium.

How to fix CVE-2018-14861?

To fix CVE-2018-14861, users should update to a version of Odoo that includes the necessary security patches.

Where can I find more information about CVE-2018-14861?

More information about CVE-2018-14861 can be found at the following reference: https://github.com/odoo/odoo/issues/32506.