CVE-2020-29396 - Vulnerability Details - OpenCVE

A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users to execute arbitrary code, leading to privilege escalation.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Odoo	Odoo
Python	Python

Configuration 1 [-]

AND

OR	cpe:2.3:a:odoo:odoo:::::community:::*
	cpe:2.3:a:odoo:odoo:::::enterprise:::*

cpe:2.3:a:python:python:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/odoo/odoo/issues/63712
https://www.oracle.com/security-alerts/cpujul2022.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: odoo

Published: 2020-12-22T16:25:39

Updated: 2024-08-04T16:55:09.224Z

Reserved: 2020-11-30T00:00:00

Link: CVE-2020-29396

Vulnrichment

No data.

NVD

Status : Modified

Published: 2020-12-22T17:15:13.550

Modified: 2024-11-21T05:23:59.430

Link: CVE-2020-29396

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Odoo Community", "vendor": "Odoo", "versions": [{"lessThan": "unspecified", "status": "affected", "version": "11.0", "versionType": "custom"}]}, {"product": "Odoo Enterprise", "vendor": "Odoo", "versions": [{"lessThan": "unspecified", "status": "affected", "version": "11.0", "versionType": "custom"}]}, {"product": "Odoo Community", "vendor": "Odoo", "versions": [{"lessThanOrEqual": "13.0", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Odoo Enterprise", "vendor": "Odoo", "versions": [{"lessThanOrEqual": "13.0", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Toufik Ben Jaa"}, {"lang": "en", "value": "St\u00e9phane Debauche"}, {"lang": "en", "value": "Beno\u00eet FONTAINE"}], "descriptions": [{"lang": "en", "value": "A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users to execute arbitrary code, leading to privilege escalation."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 9.9, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-267", "description": "CWE-267: Privilege Defined With Unsafe Actions", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-07-25T16:17:33", "orgId": "22c90092-d340-4fb8-a06e-f1193e012523", "shortName": "odoo"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/odoo/odoo/issues/63712"}, {"tags": ["x_refsource_MISC"], "url": "https://www.oracle.com/security-alerts/cpujul2022.html"}], "source": {"advisory": "ODOO-SA-2020-12-02", "discovery": "EXTERNAL"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@odoo.com", "ID": "CVE-2020-29396", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Odoo Community", "version": {"version_data": [{"version_affected": ">=", "version_value": "11.0"}]}}, {"product_name": "Odoo Enterprise", "version": {"version_data": [{"version_affected": ">=", "version_value": "11.0"}]}}, {"product_name": "Odoo Community", "version": {"version_data": [{"version_affected": "<=", "version_value": "13.0"}]}}, {"product_name": "Odoo Enterprise", "version": {"version_data": [{"version_affected": "<=", "version_value": "13.0"}]}}]}, "vendor_name": "Odoo"}]}}, "credit": [{"lang": "eng", "value": "Toufik Ben Jaa"}, {"lang": "eng", "value": "St\u00e9phane Debauche"}, {"lang": "eng", "value": "Beno\u00eet FONTAINE"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users to execute arbitrary code, leading to privilege escalation."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 9.9, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": " CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L", "version": "3.0"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-267: Privilege Defined With Unsafe Actions"}]}]}, "references": {"reference_data": [{"name": "https://github.com/odoo/odoo/issues/63712", "refsource": "MISC", "url": "https://github.com/odoo/odoo/issues/63712"}, {"name": "https://www.oracle.com/security-alerts/cpujul2022.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpujul2022.html"}]}, "source": {"advisory": "ODOO-SA-2020-12-02", "discovery": "EXTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T16:55:09.224Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/odoo/odoo/issues/63712"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.oracle.com/security-alerts/cpujul2022.html"}]}]}, "cveMetadata": {"assignerOrgId": "22c90092-d340-4fb8-a06e-f1193e012523", "assignerShortName": "odoo", "cveId": "CVE-2020-29396", "datePublished": "2020-12-22T16:25:39", "dateReserved": "2020-11-30T00:00:00", "dateUpdated": "2024-08-04T16:55:09.224Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:odoo:odoo:*:*:*:*:community:*:*:*", "matchCriteriaId": "C1269963-1DD6-4B28-A33F-B8C2F69AEF4C", "versionEndIncluding": "13.0", "versionStartIncluding": "11.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:odoo:odoo:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "1483CFE3-394B-4AB7-9561-63935D090B8D", "versionEndIncluding": "13.0", "versionStartIncluding": "11.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", "matchCriteriaId": "DC3B293C-2E49-4EB8-8951-11BE3927C23D", "versionStartIncluding": "3.6.0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users to execute arbitrary code, leading to privilege escalation."}, {"lang": "es", "value": "Un problema del sandboxing en Odoo Community versiones 11.0 hasta 13.0 y Odoo Enterprise versiones 11.0 hasta 13.0, cuando se ejecuta con Python versiones 3.6 o posteriores, permite a usuarios autenticados remotos ejecutar c\u00f3digo arbitrario, conllevando a una escalada de privilegios"}], "id": "CVE-2020-29396", "lastModified": "2024-11-21T05:23:59.430", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 9.9, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L", "version": "3.0"}, "exploitabilityScore": 3.1, "impactScore": 6.0, "source": "security@odoo.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-12-22T17:15:13.550", "references": [{"source": "security@odoo.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/odoo/odoo/issues/63712"}, {"source": "security@odoo.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://www.oracle.com/security-alerts/cpujul2022.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/odoo/odoo/issues/63712"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://www.oracle.com/security-alerts/cpujul2022.html"}], "sourceIdentifier": "security@odoo.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-267"}], "source": "security@odoo.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}