Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-11784

Опубликовано: 22 дек. 2020
Источник: nvd
CVSS3: 6.5
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to obtain access to arbitrary messages in conversations they were not a party to.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:odoo:odoo:*:*:*:*:community:*:*:*
Версия до 14.0 (включая)
cpe:2.3:a:odoo:odoo:*:*:*:*:enterprise:*:*:*
Версия до 14.0 (включая)

EPSS

Процентиль: 43%
0.00208
Низкий

6.5 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-284
CWE-862

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 5 лет назад

Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to obtain access to arbitrary messages in conversations they were not a party to.

CVSS3: 6.5
debian
около 5 лет назад

Improper access control in mail module (notifications) in Odoo Communi ...

github
больше 3 лет назад

Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to obtain access to arbitrary messages in conversations they were not a party to.

EPSS

Процентиль: 43%
0.00208
Низкий

6.5 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-284
CWE-862