CVE-2021-44460

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the s...

Original description

The description as published by the source.

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system with the deactivated account and any permission it still holds, via crafted RPC requests.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami odoo

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"13.0.1"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Ubuntu UBUNTU-CVE-2021-44460 odoo

References

advisory github.com
web nvd.nist.gov