CVE-2017-10804 | BDVDB-2026-87104 Detail

Description#

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under certain circumstances because parameters containing 0x00 characters are truncated before reaching the database layer. This occurs because Psycopg 2.x before 2.6.3 is used.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/odoo/odoo/issues/17914
http://initd.org/psycopg/docs/news.html#what-s-new-in-psycopg-2-6-3
https://github.com/psycopg/psycopg2/issues/420

Exploit#

No public exploit known

History#

Version 12017-07-04Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.