Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2018-15632

Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty databas

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
odoo

Description

Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Odoo Odoo Community

  • unspecified to ≤ 11.0affected

Odoo Odoo Enterprise

  • unspecified to ≤ 11.0affected

References