CVE-2017-10805 | BDVDB-2026-87105 Detail

Description#

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote authenticated users to hijack OAuth sessions of other users.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/odoo/odoo/issues/17921

Exploit#

No public exploit known

History#

Version 12017-07-04Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.