| ID |
CVE-2017-5871
|
| Summary |
Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection. The impact is: obtain sensitive information (remote). |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:odoo:odoo:8.0:*:*:*:*:*:*:*
cpe:2.3:a:odoo:odoo:8.0:*:*:*:*:*:*:*
-
cpe:2.3:a:odoo:odoo:8.0:20160726:*:*:*:*:*:*
cpe:2.3:a:odoo:odoo:8.0:20160726:*:*:*:*:*:*
-
cpe:2.3:a:odoo:odoo:9.0:*:*:*:*:*:*:*
cpe:2.3:a:odoo:odoo:9.0:*:*:*:*:*:*:*
-
cpe:2.3:a:odoo:odoo:10.0:*:*:*:*:*:*:*
cpe:2.3:a:odoo:odoo:10.0:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 5.8 (as of 23-05-2019 - 15:44) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-601 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| PARTIAL |
PARTIAL |
NONE |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
| refmap
via4
|
|
| Last major update |
23-05-2019 - 15:44 |
| Published |
22-05-2019 - 20:29 |
| Last modified |
23-05-2019 - 15:44 |
