Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-44460

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system with the deactivated account and any permission it still holds, via crafted RPC requests.

Published

2023-04-25T19:15:09.600

Last Modified

2024-11-21T06:31:01.170

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-284
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application odoo odoo ≤ 13.0 Yes
Application odoo odoo ≤ 13.0 Yes
References