CoreCVE
Back

MEDIUM

Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters

Published Jun 28, 2019

Description

Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jun 28, 2019
Updated Aug 5, 2024
Reserved Aug 2, 2018
Link CVE-2018-14867
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-14867
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-14867