VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jun 28, 2019· Updated Jun 17, 2026

CVE-2018-14885

CVE-2018-14885

Description

Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Odcms/Odoo4 versions
    cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*+ 3 more
    • cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*
    • cpe:2.3:a:odoo:odoo:10.0:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:odoo:odoo:11.0:*:*:*:community:*:*:*
    • cpe:2.3:a:odoo:odoo:11.0:*:*:*:enterprise:*:*:*
  • Odoo/Odoo Communitydescription
  • Odcms/Enterprisellm-create
    Range: 10.0, 11.0
  • Odcms/Communityllm-create
    Range: 10.0, 11.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.