NVD

Id
87720  
Name
CVE-2017-10804  
Description
In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under certain circumstances because parameters containing 0x00 characters are truncated before reaching the database layer. This occurs because Psycopg 2.x before 2.6.3 is used.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-07-04  
Modified Date
2017-07-12  
Seq
2017-10804  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
421803 87720 CVE-2017-7432 https://bugzilla.novell.com/show_bug.cgi?id=1027619  View
421804 87720 CVE-2017-7432 https://dl.netiq.com/Download?buildid=24FxpmqdThE~  View
421805 87720 CVE-2017-7432 https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~  View
421806 87720 CVE-2017-7432 https://www.netiq.com/support/kb/doc.php?id=7016795  View
421807 87720 CVE-2017-7432 https://www.novell.com/support/kb/doc.php?id=7010166  View
421808 87720 CVE-2017-7432 https://bugzilla.novell.com/show_bug.cgi?id=1027619  View
421809 87720 CVE-2017-7432 https://dl.netiq.com/Download?buildid=24FxpmqdThE~  View
421810 87720 CVE-2017-7432 https://dl.netiq.com/Download?buildid=wpS1UqIlx-o~  View
421811 87720 CVE-2017-7432 https://www.netiq.com/support/kb/doc.php?id=7016795  View
421812 87720 CVE-2017-7432 https://www.novell.com/support/kb/doc.php?id=7010166  View
430034 87720 CVE-2017-0263 1038449  View

Related JVN