CVE-2018-14868

Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of…

published June 28, 2019

CVSS
—
EPSS
1%
Percentile
47.3
In the wild
Unconfirmed
What it is

Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current password via a crafted RPC call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00592 · 47.3th percentile
Published
2019-06-28T17:36Z
EPSS history
Timeline
  • 28 JUN 17:36Z
    Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of…
    cvelistv5