CVE-2018-14863 - Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC

Back Back to CVE browser

HIGH

Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC

Published Jul 3, 2019

8.1

HIGH

CVSS 3.0

EPSS 0.96%

Description

Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-6745
Advisory
https://github.com/odoo/odoo/issues/32508
x_refsource_CONFIRMPatchThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-6745		Advisory
https://github.com/odoo/odoo/issues/32508		x_refsource_CONFIRMPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 3, 2019

Updated Aug 5, 2024

Reserved Aug 2, 2018

Link CVE-2018-14863

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-14863

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jul 3, 2019

Updated Aug 5, 2024

Link EUVD-2018-6745

GitHub

No data