Improper Access Control in Odoo Community and Enterprise

CVE-2024-12368

What is CVE-2024-12368?

An improper access control vulnerability affects the auth_oauth module in both Odoo Community 15.0 and Odoo Enterprise 15.0. This flaw allows internal users to export OAuth tokens associated with other users, potentially leading to unauthorized access and data leakage. Organizations using these versions should assess and mitigate the risks associated with this vulnerability to ensure their data integrity and security.

References