Improper Input Validation in Odoo Community and Enterprise by Odoo

CVE-2018-15632

What is CVE-2018-15632?

The vulnerability occurs due to insufficient input validation in the database creation logic used in both Odoo Community 11.0 and Odoo Enterprise 11.0. This flaw allows remote attackers to exploit the system by initializing an empty database, enabling access with default credentials. Such unauthorized access could lead to further compromises, highlighting the importance of stringent validation mechanisms to safeguard database integrity.

References