Improper Access Control in Odoo Community and Enterprise Products

CVE-2021-45111

What is CVE-2021-45111?

An improper access control vulnerability exists in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier. This flaw allows remote authenticated users to exploit the system by triggering the creation of demonstration data. Consequently, this can result in the establishment of user accounts with known credentials, potentially compromising the integrity and security of the platform and sensitive user information.

References