CoreCVE
Back

MEDIUM

Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to access data in transient records that they do not own by making an RPC call before garbage collection occurs

Published Jul 3, 2019

Description

Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to access data in transient records that they do not own by making an RPC call before garbage collection occurs.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 3, 2019
Updated Aug 5, 2024
Reserved Aug 2, 2018
Link CVE-2018-14866
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-14866
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-14866