Description
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 11 | | =14.0.0+dfsg.2-7 || =14.0.0+dfsg.2-7+deb11u1 || =14.0.0+dfsg.2-7+deb11u2 || =14.0.0+dfsg.3-1 || =14.0.0+dfsg.3-1.1 || =14.0.0+dfsg.3-1~bpo11+1 || =14.0.0+dfsg.3-1~bpo11+2 || =14.0.0+dfsg.3-1~bpo11+3 || =14.0.0+dfsg.4-1 || =16.0.0+dfsg.1-1 || =16.0.0+dfsg.1-1.1 || =16.0.0+dfsg.1-2 || =16.0.0+dfsg.1-3 || =16.0.0+dfsg.2-1 || =16.0.0+dfsg.2-1.1 || =16.0.0+dfsg.2-1~bpo12+1 || =16.0.0+dfsg.2-2 || =16.0.0+dfsg.2-2~bpo12+1 || =16.0.0+dfsg.2-3 || =16.0.0+dfsg.2-3~bpo12+1 || =17.0.0+dfsg-1 || =17.0.0+dfsg2-1 || =17.0.0+dfsg3-1 || =18.0.0+dfsg-1 || =18.0.0+dfsg-1.1 || =18.0.0+dfsg-2 || =19.0.0+dfsg-1 |
