CVEvulnerability

CVE-2017-10805

8.8 HIGH Published 2017-07-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-07-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-863

Description

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote authenticated users to hijack OAuth sessions of other users.

Affected configurations

• odoo odoo 8.0 • odoo odoo 9.0 • odoo odoo 10.0

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References