CVE-2021-44460

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the s...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system with the deactivated account and any permission it still holds, via crafted RPC requests.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami odoo

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"13.0.1"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Ubuntu UBUNTU-CVE-2021-44460 odoo

Références

advisory github.com
web nvd.nist.gov