CVE-2019-11784 in Community

Tóm tắt

Bởi MITRE • 23/12/2020

Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to obtain access to arbitrary messages in conversations they were not a party to.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Tiết lộ: 23/12/2020
• Kiểm duyệt: được chấp nhận
• mục: VDB-166684
• CPE: sẵn sàng
• CWE: CWE-284 (Đã xác nhận)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00976
• KEV: không
• Các hoạt động: rất thấp
• ngành: Chemical, Telecommunication, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-11784
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-11784
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-11784/