Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-15632

Опубликовано: 22 дек. 2020
Источник: nvd
CVSS3: 8.2
CVSS3: 9.1
CVSS2: 8.5
EPSS Низкий

Описание

Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:odoo:odoo:*:*:*:*:community:*:*:*
Версия до 11.0 (включая)
cpe:2.3:a:odoo:odoo:*:*:*:*:enterprise:*:*:*
Версия до 11.0 (включая)

EPSS

Процентиль: 68%
0.00576
Низкий

8.2 High

CVSS3

9.1 Critical

CVSS3

8.5 High

CVSS2

Дефекты

CWE-20
CWE-20

Связанные уязвимости

CVSS3: 9.1
ubuntu
около 5 лет назад

Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.

CVSS3: 9.1
debian
около 5 лет назад

Improper input validation in database creation logic in Odoo Community ...

github
больше 3 лет назад

Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.

EPSS

Процентиль: 68%
0.00576
Низкий

8.2 High

CVSS3

9.1 Critical

CVSS3

8.5 High

CVSS2

Дефекты

CWE-20
CWE-20