Back to Database
Status published
Medium
CVE-2015-0861
model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x...
Vulnerability Description
model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-0861
Credits & Attribution
No credits recorded in the NVD database.
References
More from tryton
View All →CVE-2022-26662
An XML Entity Expansion (XEE) issue was discovered in Tryton...
High
7.5
CVE-2022-26661
An XXE issue was discovered in Tryton Application Platform (Server)...
Medium
6.5
CVE-2019-10868
In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19,...
Medium
4.3
CVE-2018-19443
The client in Tryton 5.x before 5.0.1 tries to make...
Medium
5.9
CVE-2016-1242
file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before...
Medium
4.4
Affected Vendor
tryton
View all reports →Affected Software
trytond, debian linux
Vulnerable Versions:
3.2.0, 3.4.0, 3.6.0, 3.8.0, 8.0
Timeline
Official Publish:
April 13th, 2016
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.