VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jul 3, 2019· Updated Jun 17, 2026

CVE-2018-14861

CVE-2018-14861

Description

Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Odcms/Odoo4 versions
    cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*+ 3 more
    • cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*
    • cpe:2.3:a:odoo:odoo:10.0:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:odoo:odoo:11.0:*:*:*:community:*:*:*
    • cpe:2.3:a:odoo:odoo:11.0:*:*:*:enterprise:*:*:*
  • Odoo/Odoo Enterprisedescription
  • Odcms/Enterprisellm-create
    Range: 10.0, 11.0
  • Odcms/Communityllm-create
    Range: 10.0, 11.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.