CVE-2024-12368

Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of...

Original description

The description as published by the source.

Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami odoo

[{"type":"SEMVER","events":[{"introduced":"15.0.0"},{"fixed":"15.0.20240510"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-12368 odoo
Ubuntu UBUNTU-CVE-2024-12368 odoo

References

advisory github.com
web nvd.nist.gov