Hello,
odoo keeps a record of entries in the system with the password in plain text.
It is stored in the datatir in forlder /sesions
Isn't it a vulnerability?
How can I avoid it?
Is it ready a module to solve this?
Thanks.
Odoo is the world's easiest all-in-one management software.
It includes hundreds of business apps:
- CRM
- e-Commerce
- Accounting
- Inventory
- PoS
- Project management
- MRP
This question has been flagged
2
Replies
2119
Views
/odoo/.local/share/Odoo/sessions
Yes, it's true, vulnerability
Does this app help? https://www.odoo.com/apps/modules/10.0/auth_crypt/
Hi
no, this is the default module and it encrypts passwords in the database, and the above describes the vulnerability in the session data are different things
Enjoying the discussion? Don't just read, join in!
Create an account today to enjoy exclusive features and engage with our awesome community!
Sign up
tell me the path where passwords are stored in clear form? as far as I know, passwords are stored in the database in the form of hashes with salt