NetSight
high8.1

CVE-2018-14863

Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call privat…

Impact

Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC.

Affected products

VendorProductAffected versions
OdooOdoo
Versions 9.0, 10.0, 11.0

Weakness classification

References