CVE-2012-0215

model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Many field in the…

published July 12, 2012

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via a (1) create, (2) write, (3) delete, or (4) copy rpc call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01983 · 80.4th percentile
Published
2012-07-12T20:00Z
EPSS history
Timeline
  • 12 JUL 20:00Z
    model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Many field in the…
    cvelistv5