CVE-2018-14885
Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a data…
Published Jun 28, 2019 · updated Jun 16, 2026 · odoo odoo
Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds.
Timeline
Detection, updates, and resolution for this record.
Jun 28, 2019 · Catalog
Detected
Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds.
Jun 16, 2026 · Catalog
Updated
Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds.
Affected
- cpe odoo/odoo10.0
- cpe odoo/odoo11.0
Sources
- NIST NVDCVE-2018-14885
Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds.
nvd.nist.gov - Odoo SecurityCVE-2018-14885
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com