VULNERABILITY INTELLIGENCE

CVE-2017-10805

CVSS score8.8 HIGH

EPSS probability1.00%

CISA KEVNot currently listed

Published2017-07-04

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote authenticated users to hijack OAuth sessions of other users.

Weakness classification

nvd@nist.gov: CWE-863

Primary references

cve@mitre.org — Mitigation, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Third Party Advisory