CVE-2019-11780CWE-284

Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to…

High · published December 19, 2019

CVSS v3.1
8.1
EPSS
2%
Percentile
81.2
In the wild
Unconfirmed
What it is

Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.02063 · 81.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2019-12-19T15:50Z
EPSS history
Timeline
  • 19 DEC 15:50Z
    Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to…
    cvelistv5