CVE-2018-15640
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.
Published Apr 9, 2019 · updated Jun 16, 2026 · odoo odoo
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.
Timeline
Detection, updates, and resolution for this record.
Apr 9, 2019 · Catalog
Detected
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.
Jun 16, 2026 · Catalog
Updated
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.
Affected
- cpe odoo/odooversion unspecified
Sources
- NIST NVDCVE-2018-15640
Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.
nvd.nist.gov - Odoo SecurityCVE-2018-15640
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com