Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-11782

Опубликовано: 22 дек. 2020
Источник: nvd
CVSS3: 6.5
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact management to modify user accounts, leading to privilege escalation.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:odoo:odoo:*:*:*:*:community:*:*:*
Версия до 14.0 (включая)
cpe:2.3:a:odoo:odoo:*:*:*:*:enterprise:*:*:*
Версия до 14.0 (включая)

EPSS

Процентиль: 34%
0.00133
Низкий

6.5 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-284
NVD-CWE-Other

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 4 лет назад

Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact management to modify user accounts, leading to privilege escalation.

CVSS3: 6.5
debian
больше 4 лет назад

Improper access control in Odoo Community 14.0 and earlier and Odoo En ...

github
около 3 лет назад

Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact management to modify user accounts, leading to privilege escalation.

EPSS

Процентиль: 34%
0.00133
Низкий

6.5 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-284
NVD-CWE-Other