CVEvulnerability

CVE-2018-15632

9.1 CRITICAL Published 2020-12-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-12-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS 3.0 ([email protected])
8.2 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS 2.0 ([email protected])
8.5 HIGH — AV:N/AC:L/Au:N/C:N/I:P/A:C
Weaknesses
CWE-20

Description

Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials.

Affected configurations

• odoo odoo (<= 11.0)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References