CVE-2024-12368

Odoo / Odoo Community PUBLISHED

Description (CNA)

Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.

Affected (CNA)

Vendor / product	Versions
Odoo / Odoo Community	affected 15.0
Odoo / Odoo Enterprise	affected 15.0

CWE

CWE-284

References

https://github.com/odoo/odoo/issues/193854

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.