CVE-2018-14861
Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed…
Published Jul 3, 2019 · updated Jun 16, 2026 · odoo odoo
Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users.
Timeline
Detection, updates, and resolution for this record.
Jul 3, 2019 · Catalog
Detected
Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users.
Jun 16, 2026 · Catalog
Updated
Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users.
Affected
- cpe odoo/odoo10.0
- cpe odoo/odoo11.0
Sources
- NIST NVDCVE-2018-14861
Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users.
nvd.nist.gov - Odoo SecurityCVE-2018-14861
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com