CVE-2017-10804
CriticalSummary
In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under certain circumstances because parameters containing 0x00 characters are truncated before reaching the database layer.
Risk Assessment
This can lead to unauthorized access to the system, posing a serious threat to the organization's data security.
Recommendation
It is recommended to upgrade Psycopg to version 2.6.3 or later to mitigate this vulnerability.
Original NVD description (English source)
In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under certain circumstances because parameters containing 0x00 characters are truncated before reaching the database layer. This occurs because Psycopg 2.x before 2.6.3 is used.