CVE-2019-11784 in Community

Сводка

по MITRE • 23.12.2020

Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to obtain access to arbitrary messages in conversations they were not a party to.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Раскрытие: 23.12.2020
• Модерация: принято
• Вход: VDB-166684
• CPE: готов
• CWE: CWE-284 (Подтверждённый)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00976
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Telecommunication, Government, ...

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-11784
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-11784
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-11784/